✔ icinga2 | check_ssl_cert

You are here: Home

Icinga List

Security

hacks

✔ icinga2 | check_ssl_cert

Created: 13 August 2018 | Written by vincent | Print | Email | Hits: 7921

View Comments

Icinga2 | check for certification validation
for the spez Plugin path --> Icinga2 | (spez)Plugins | define path
working on Icinga2 "# icinga2 daemon -C " (version: r2.9.1-1)

steps	on Icinga2
1	# cd /usr/lib/nagios/pluginsCustom
	# wget https://raw.githubusercontent.com/matteocorti/check_ssl_cert/master/check_ssl_cert
	# chmod +x check_ssl_cert
	# ./check_ssl_cert -H kozo.ch -w 30 -c 15 SSL_CERT OK - x509 certificate 'kozo.ch' from 'Let's Encrypt Authority X3' valid until Sep 14 22:41:31 2018 GMT (expires in 32 days)\|days=32;30;15;;
b
c	vi /etc/icinga2/conf.d/07_urls/0_check_x509.conf
	object CheckCommand "check_x509" { command = [ PluginCustomDir + "/check_ssl_cert" ] arguments = { "-H" = "$http_url$" "-w" = "30" "-c" = "15" } }
	vi /etc/icinga2/conf.d/07_urls/0_tpl-x509.conf
	template Service "x509" { host_name = "icinga2-01.kozo.ch" max_check_attempts = 3 check_interval = 3m retry_interval = 30s }
	vi /etc/icinga2/conf.d/07_urls/x509_xxxxxxxxx.conf cd /etc/icinga2/conf.d/07_urls/
	object Service "check_url-alvearium-info" { import "x509" vars.http_url = "alvearium.info" display_name = "X.509-Zertifikate --> " + vars.http_url check_command = "check_x509" }



	# icinga2 daemon -C # time systemctl reload icinga2 # time systemctl restart icinga2 # multitail /var/log/icinga2/icinga2.log

	<Timeout exceeded.><Terminated by signal 9 (Killed).> after update to (version: r2.10.1-1)	520 TIMEOUT="15"	change to 30