Hi all
Appreciate the responses, but I have more than 1 problem I am trying to solve.
- I need to monitor the certs on a few web sites. That's pretty easy, and works out of the box.
- I need to monitor the certs on a few web sites that are only reachable through the proxy. Not sure how to do that.
- I have a few certs local to my client that I need to keep an eye on too. But these are used by applications, and are not related to a web page, so effectively I need to to keep tabs on /foo/bar/cert
Was looking for some guidance on 2. And a magic bullet for 3. :-D
I could code something up to do item 3, but I was really hoping there would already be something that somebody could share. I used to code Xymon tests for breakfast back when The Dead Sea was only Somewhat Unwell. See here. https://wiki.xymonton.org/doku.php/monitors But I am a bit rusty these days, and thought I'd lean on the community a little.
If I can't, I guess it's back to coding again. :-)
Regards Vernon
On Wed, 30 Aug 2023 at 02:48, Josh Luthman <josh at imaginenetworksllc.com> wrote:
Little more on this...
35.171.79.170 host.foo.com # https://host.foo.com ssldays=22:15 #22 day warn with 15 day red
On Tue, Aug 29, 2023 at 10:39?AM Dito <dito74 at gmail.com> wrote:
I do the same (add https site to monitor), and the sslcert test populates itself, 2 weeks before expiration it goes yellow and 2-3 days before, it goes red.
SSL certificate for https://xxxxxxxxxxxxxx/ expires in 547 days
Server certificate: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.com start date: 2023-02-27 17:04:27 GMT expire date:2025-02-26 17:04:27 GMT key size:4096 issuer:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx signature algorithm: sha256WithRSAEncryption
Cipher used: ECDHE-RSA-AES256-GCM-SHA384 (256 bits)
Gab
On Mon, Aug 28, 2023 at 10:12?PM IO Support <support at ionetworkadmin.com> wrote:
I just add the https://namehere.com test into my hosts.cfg file and it tests the http status and auto populates an sslcert column that shows the https info you're looking for.
Sample line: 0.0.0.0 WebPage.com # https://webpage.com
Thank You, Kris Springer Systems Admin I/O Network Administrationsupport at ionetworkadmin.comhttps://www.ionetworkadmin.com
On 8/28/23 16:46, Vernon Everett wrote:
Hi all
Haven't been using Xymon for many years, but I now have a small client looking for a lightweight and cost-effective (free) monitoring solution, and Zymon fitted the bill.
Most of the config and setup is coming back to me, but I'm a little stuck on certs. Some certs I can point Xymon directly to the URL, and I get the response I want. Others are (multiple) certs on my Xymon client server, not related to a URL, but used by applications. I cannot remember how we configure those to check for expiration.
Any tips appreciated.
Regards Vernon
--
"Accept the challenges so that you can feel the exhilaration of victory"
- General George Patton
"Don't find fault. Find a remedy"
- Henry Ford
Xymon mailing listXymon at xymon.comhttp://lists.xymon.com/mailman/listinfo/xymon
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
--
"Accept the challenges so that you can feel the exhilaration of victory"
- General George Patton
"Don't find fault. Find a remedy"
- Henry Ford