[Xymon] Re: RDP TLS cert monitoring

Hi J,

On 9/25/24 8:26 PM, Jeremy Laidman wrote:

I'd be surprised if you couldn't use https://<IP>:3389/ and get some kind of useful result.

I'll check that out.

You can use the "ssl" keyword in protocols.cfg and that checks the certificate. Something like this:

[rdps] port 3389 options ssl send "QUIT\r\n"

I'll check that out too.

The "send" line is not necessary, but it lets the RDP endpoint close the session, and might avoid error logs being added to the event logs.

ACK

Thank you J, you've given me some things to check to monitor the TLS cert on servers that aren't restarted often enough for the built-in renew function to happen.

-- Grant. . . . unix || die