Page 1 of 1

Certificate Management

Posted: Wed Dec 12, 2018 8:28 am
by jharr
Is anyone using Nagios to check digital certificate expirations on servers that are monitored? I have a Powershell script to check for certificates that are expiring within a certain time frame. We have approximately 25 servers that we monitor. Can Nagios run the script and show status? Thanks

Re: Certificate Management

Posted: Wed Dec 12, 2018 1:09 pm
by mcapra
jharr wrote:Is anyone using Nagios to check digital certificate expirations on servers that are monitored?
Yup -- via check_http.
CHECK CERTIFICATE: check_http -H www.verisign.com -C 14

When the certificate of 'www.verisign.com' is valid for more than 14 days,
a STATE_OK is returned. When the certificate is still valid, but for less than
14 days, a STATE_WARNING is returned. A STATE_CRITICAL will be returned when
the certificate is expired.
check_tcp can do this too:
-D, --certificate=INTEGER[,INTEGER]
Minimum number of days a certificate has to be valid.
1st is #days for warning, 2nd is critical (if not specified - 0).

Re: Certificate Management

Posted: Thu Dec 13, 2018 2:39 pm
by scottwilkerson
Thanks @mcapra!