If you're running a test within nagios, then
openssl x509 -in <certname> -noout -enddate
gives the expiry time.
So compare to the current date and voila!
Sam
On 1 December 2014 at 20:40, Stephen Jones <[log in to unmask]> wrote:
>> Note that I'll personally check that the scripts are
>> now running correctly.
>
> Cheers, John. I got caught out with that bug and wound up with no
> certificate for a couple of days .... but far worse things happen!
>
>> don't know how to use <nagios> to check certificate expiry
>
> That's me. Let me know the details.
>
> Steve
>
>> It looks like our fix for the certificate renewal email reminders hasn't
>> worked since Nov 3rd and hence there may be a few
>> certificates that either won't have had a renewal or will get a "7 days to
>> go" one with much less than 7 to go!
>>
>> Note that I'll personally check that the scripts are now running
>> correctly.
>>
>> I know that many (most?) of you have Nagios checks for these things, but
>> this would be a good opportunity to
>> remind you of that solution. If you run Nagios but don't know how to use
>> it to check certificate expiry then let
>> me know and I'll see if I can send you our Nagios scripts.
>>
>> Cheers, sorry for any inconvenience and apologies again
>>
>> cheers
>>
>> JK
>>
>> --
>> Scanned by iCritical.
>>
>>
|