Page 1 of 1

check_http see certificate as near to expiring, not true.

Posted: Thu Jun 13, 2019 8:06 am
by realtebo
I'm checking a website certificate (obviously, not really example.com) using

Code: Select all

mirko@nagios:/usr/local/nagios$ ./libexec/check_http -H www.example.com -C 14 --sni -v
Actually it prints

Code: Select all

SSL WARNING - Certificate 'www.example.com' expires in 6 day(s) (2019-06-20 14:00 +0200/CEST).
Navigating with a browser, the certificate results ok, expirying in a year. I installed it some hours ago and my Chrome is seeing it correctly.

Re: check_http see certificate as near to expiring, not true

Posted: Thu Jun 13, 2019 4:21 pm
by scottwilkerson
does the certificate have a parent that is expiring?

I just tested on our public server and it reports properly

Code: Select all

# /usr/local/nagios/libexec/check_http -H www.nagios.com -C 14 --sni -v
SSL initialized
SSL OK - Certificate '*.nagios.com' will expire on 2020-06-10 17:59 -0600/CST. 
And that is in-fact when the certificate expires