- Possibility of https certificate validity alert?
![](https://secure.gravatar.com/avatar/ac1095b343e43f9843e51cdd8b9dc3c9.jpg?s=120&d=mm&r=g)
Hello everyone,
Was wondering if it possible for Observium to create an alert for https certificate validity check? Anyone managed to do this or is it not possible?
In an ideal case I want an alert 90 days before the certificate expires.
With kind regards
David S.
![](https://secure.gravatar.com/avatar/3bbbd945c333b8013d0dfa23058f65b9.jpg?s=120&d=mm&r=g)
Hi,
use probes (currently in Pro only) :)
edit:
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19:
Hello everyone,
Was wondering if it possible for Observium to create an alert for https certificate validity check? Anyone managed to do this or is it not possible?
In an ideal case I want an alert 90 days before the certificate expires.
With kind regards
David S.
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
![](https://secure.gravatar.com/avatar/293441206121ed253908c989ef2fcdcb.jpg?s=120&d=mm&r=g)
Hi
I tried the http-check probe with ssl-test and I wonder if it's possible to change the hostname/webserver name it should probe for on the same host so I can verify other certs in the same server.
I tried adding -H [ http://www.webhost.com/ | www.webhost.com ] but it doesn't seem to user that value.
Regards Daniel
From: "observium" observium@observium.org To: "observium" observium@observium.org, "observium" observium@observium.org Cc: "Mike Stupalov" mike@observium.org Sent: Tuesday, March 24, 2020 1:13:08 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
Hi,
use probes (currently in Pro only) :)
edit:
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19:
Hello everyone,
Was wondering if it possible for Observium to create an alert for https certificate validity check? Anyone managed to do this or is it not possible?
In an ideal case I want an alert 90 days before the certificate expires.
With kind regards
David S.
_______________________________________________ observium mailing list [ mailto:observium@observium.org | observium@observium.org ] [ http://postman.memetic.org/cgi-bin/mailman/listinfo/observium | http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ]
![](https://secure.gravatar.com/avatar/3bbbd945c333b8013d0dfa23058f65b9.jpg?s=120&d=mm&r=g)
$ /usr/lib/nagios/plugins/check_http -C 30,15 -H observium.org OK - Certificate 'docs.observium.org' will expire on Fri May 8 18:39:00 2020.
Try to use options: -H yourhostname -C warn_age[,crit_age]
Daniel Johansson via observium wrote on 24.03.2020 16:04:
Hi
I tried the http-check probe with ssl-test and I wonder if it's possible to change the hostname/webserver name it should probe for on the same host so I can verify other certs in the same server.
I tried adding -H www.webhost.com http://www.webhost.com but it doesn't seem to user that value.
Regards Daniel
*From: *"observium" observium@observium.org *To: *"observium" observium@observium.org, "observium" observium@observium.org *Cc: *"Mike Stupalov" mike@observium.org *Sent: *Tuesday, March 24, 2020 1:13:08 PM *Subject: *Re: [Observium] - Possibility of https certificate validity alert?
Hi,
use probes (currently in Pro only) :)
edit:
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19:
Hello everyone, Was wondering if it possible for Observium to create an alert for https certificate validity check? Anyone managed to do this or is it not possible? In an ideal case I want an alert 90 days before the certificate expires. With kind regards David S. _______________________________________________ observium mailing list observium@observium.org <mailto:observium@observium.org> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
-- Mike Stupalov Observium Limited, http://observium.org
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
![](https://secure.gravatar.com/avatar/293441206121ed253908c989ef2fcdcb.jpg?s=120&d=mm&r=g)
Hi
I did that but it seems it doesn't take the -H option at all. It's stull just using the hostname of the server I'm checking it on.
+------------+-----------------------------------------------------------------------+---------+--------+ | Type | Message | Runtime | Status | +------------+-----------------------------------------------------------------------+---------+--------+ | check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok | | check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok | +------------+-----------------------------------------------------------------------+---------+--------+
Regards Daniel
From: "Mike Stupalov" mike@observium.org To: "observium" observium@observium.org, "observium" observium@observium.org Cc: "Daniel Johansson" daz@voodoo-people.com Sent: Tuesday, March 24, 2020 4:16:04 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
$ /usr/lib/nagios/plugins/check_http -C 30,15 -H observium.org OK - Certificate 'docs.observium.org' will expire on Fri May 8 18:39:00 2020.
Try to use options: -H yourhostname -C warn_age[,crit_age]
Daniel Johansson via observium wrote on 24.03.2020 16:04:
Hi
I tried the http-check probe with ssl-test and I wonder if it's possible to change the hostname/webserver name it should probe for on the same host so I can verify other certs in the same server.
I tried adding -H [ http://www.webhost.com/ | www.webhost.com ] but it doesn't seem to user that value.
Regards Daniel
From: "observium" [ mailto:observium@observium.org | observium@observium.org ] To: "observium" [ mailto:observium@observium.org | observium@observium.org ] , "observium" [ mailto:observium@observium.org | observium@observium.org ] Cc: "Mike Stupalov" [ mailto:mike@observium.org | mike@observium.org ] Sent: Tuesday, March 24, 2020 1:13:08 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
Hi,
use probes (currently in Pro only) :)
edit:
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19:
BQ_BEGIN
Hello everyone,
Was wondering if it possible for Observium to create an alert for https certificate validity check? Anyone managed to do this or is it not possible?
In an ideal case I want an alert 90 days before the certificate expires.
With kind regards
David S.
_______________________________________________ observium mailing list [ mailto:observium@observium.org | observium@observium.org ] [ http://postman.memetic.org/cgi-bin/mailman/listinfo/observium | http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ]
![](https://secure.gravatar.com/avatar/2f514646fd1790cd9a2d62b2182a3e93.jpg?s=120&d=mm&r=g)
Try “-I” [cid:image001.png@01D601F9.CBC3CE60]
/Christian
Från: observium observium-bounces@observium.org För Daniel Johansson via observium Skickat: den 24 mars 2020 16:28 Till: Mike Stupalov mike@observium.org Kopia: Daniel Johansson daz@voodoo-people.com; observium observium@observium.org Ämne: Re: [Observium] - Possibility of https certificate validity alert?
Hi
I did that but it seems it doesn't take the -H option at all. It's stull just using the hostname of the server I'm checking it on.
+------------+-----------------------------------------------------------------------+---------+--------+ | Type | Message | Runtime | Status | +------------+-----------------------------------------------------------------------+---------+--------+ | check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok | | check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok | +------------+-----------------------------------------------------------------------+---------+--------+
[cid:image002.png@01D601F9.CBC3CE60]
Regards Daniel
________________________________ From: "Mike Stupalov" <mike@observium.orgmailto:mike@observium.org> To: "observium" <observium@observium.orgmailto:observium@observium.org>, "observium" <observium@observium.orgmailto:observium@observium.org> Cc: "Daniel Johansson" <daz@voodoo-people.commailto:daz@voodoo-people.com> Sent: Tuesday, March 24, 2020 4:16:04 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
$ /usr/lib/nagios/plugins/check_http -C 30,15 -H observium.org OK - Certificate 'docs.observium.org' will expire on Fri May 8 18:39:00 2020.
Try to use options: -H yourhostname -C warn_age[,crit_age]
Daniel Johansson via observium wrote on 24.03.2020 16:04: Hi
I tried the http-check probe with ssl-test and I wonder if it's possible to change the hostname/webserver name it should probe for on the same host so I can verify other certs in the same server.
I tried adding -H www.webhost.comhttp://www.webhost.com but it doesn't seem to user that value.
Regards Daniel
________________________________ From: "observium" observium@observium.orgmailto:observium@observium.org To: "observium" observium@observium.orgmailto:observium@observium.org, "observium" observium@observium.orgmailto:observium@observium.org Cc: "Mike Stupalov" mike@observium.orgmailto:mike@observium.org Sent: Tuesday, March 24, 2020 1:13:08 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
Hi,
use probes (currently in Pro only) :)
[cid:image003.png@01D601F9.CBC3CE60]
edit: [cid:image004.png@01D601F9.CBC3CE60]
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19:
Hello everyone,
Was wondering if it possible for Observium to create an alert for https certificate validity check?
Anyone managed to do this or is it not possible?
In an ideal case I want an alert 90 days before the certificate expires.
With kind regards
David S.
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
-- Mike Stupalov Observium Limited, http://observium.org
_______________________________________________ observium mailing list observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
-- Mike Stupalov Observium Limited, http://observium.org
![](https://secure.gravatar.com/avatar/293441206121ed253908c989ef2fcdcb.jpg?s=120&d=mm&r=g)
Hi
I still get the same issue. Also the date of the cert is not correct. It's valid until June or so, not November. I actually get the same issue with the date running the script in cli directly so that does not have anything to do with observium.
Regards Daniel
From: "Christian Eriksson" christian.eriksson@advania.com To: "observium" observium@observium.org, "Mike Stupalov" mike@observium.org Cc: "Daniel Johansson" daz@voodoo-people.com Sent: Tuesday, March 24, 2020 4:32:27 PM Subject: Sv: - Possibility of https certificate validity alert?
Try “-I”
/Christian
Från: observium observium-bounces@observium.org För Daniel Johansson via observium Skickat: den 24 mars 2020 16:28 Till: Mike Stupalov mike@observium.org Kopia: Daniel Johansson daz@voodoo-people.com; observium observium@observium.org Ämne: Re: [Observium] - Possibility of https certificate validity alert?
Hi
I did that but it seems it doesn't take the -H option at all. It's stull just using the hostname of the server I'm checking it on.
+------------+-----------------------------------------------------------------------+---------+--------+
| Type | Message | Runtime | Status |
+------------+-----------------------------------------------------------------------+---------+--------+
| check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok |
| check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok |
+------------+-----------------------------------------------------------------------+---------+--------+
Regards
Daniel
From: "Mike Stupalov" < [ mailto:mike@observium.org | mike@observium.org ] > To: "observium" < [ mailto:observium@observium.org | observium@observium.org ] >, "observium" < [ mailto:observium@observium.org | observium@observium.org ] > Cc: "Daniel Johansson" < [ mailto:daz@voodoo-people.com | daz@voodoo-people.com ] > Sent: Tuesday, March 24, 2020 4:16:04 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
$ /usr/lib/nagios/plugins/check_http -C 30,15 -H observium.org OK - Certificate 'docs.observium.org' will expire on Fri May 8 18:39:00 2020.
Try to use options: -H yourhostname -C warn_age[,crit_age]
Daniel Johansson via observium wrote on 24.03.2020 16:04:
Hi
I tried the http-check probe with ssl-test and I wonder if it's possible to change the hostname/webserver name it should probe for on the same host so I can verify other certs in the same server.
I tried adding -H [ http://www.webhost.com/ | www.webhost.com ] but it doesn't seem to user that value.
Regards
Daniel
From: "observium" [ mailto:observium@observium.org | observium@observium.org ] To: "observium" [ mailto:observium@observium.org | observium@observium.org ] , "observium" [ mailto:observium@observium.org | observium@observium.org ] Cc: "Mike Stupalov" [ mailto:mike@observium.org | mike@observium.org ] Sent: Tuesday, March 24, 2020 1:13:08 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
Hi,
use probes (currently in Pro only) :)
edit:
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19: BQ_BEGIN
Hello everyone, Was wondering if it possible for Observium to create an alert for https certificate validity check? Anyone managed to do this or is it not possible? In an ideal case I want an alert 90 days before the certificate expires. With kind regards David S. _______________________________________________ observium mailing list [ mailto:observium@observium.org | observium@observium.org ] [ http://postman.memetic.org/cgi-bin/mailman/listinfo/observium | http://postman.memetic.org/cgi-bin/mailman/listinfo/observium ]
![](https://secure.gravatar.com/avatar/ac1095b343e43f9843e51cdd8b9dc3c9.jpg?s=120&d=mm&r=g)
Thanks for the help and responses.
Opens a lot of possibilities :D
David
Van: observium observium-bounces@observium.org Namens Christian Eriksson via observium Verzonden: dinsdag 24 maart 2020 16:32 Aan: Observium observium@observium.org; Mike Stupalov mike@observium.org CC: Christian Eriksson christian.eriksson@advania.com Onderwerp: Re: [Observium] - Possibility of https certificate validity alert?
Try “-I” [cid:image001.png@01D601FB.87353AC0]
/Christian
Från: observium <observium-bounces@observium.orgmailto:observium-bounces@observium.org> För Daniel Johansson via observium Skickat: den 24 mars 2020 16:28 Till: Mike Stupalov <mike@observium.orgmailto:mike@observium.org> Kopia: Daniel Johansson <daz@voodoo-people.commailto:daz@voodoo-people.com>; observium <observium@observium.orgmailto:observium@observium.org> Ämne: Re: [Observium] - Possibility of https certificate validity alert?
Hi
I did that but it seems it doesn't take the -H option at all. It's stull just using the hostname of the server I'm checking it on.
+------------+-----------------------------------------------------------------------+---------+--------+ | Type | Message | Runtime | Status | +------------+-----------------------------------------------------------------------+---------+--------+ | check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok | | check_http | OK - Certificate 'web' will expire on Mon Nov 19 09:41:17 2029 +0000. | 0.01s | ok | +------------+-----------------------------------------------------------------------+---------+--------+
[cid:image002.png@01D601FB.87353AC0]
Regards Daniel
________________________________ From: "Mike Stupalov" <mike@observium.orgmailto:mike@observium.org> To: "observium" <observium@observium.orgmailto:observium@observium.org>, "observium" <observium@observium.orgmailto:observium@observium.org> Cc: "Daniel Johansson" <daz@voodoo-people.commailto:daz@voodoo-people.com> Sent: Tuesday, March 24, 2020 4:16:04 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
$ /usr/lib/nagios/plugins/check_http -C 30,15 -H observium.org OK - Certificate 'docs.observium.org' will expire on Fri May 8 18:39:00 2020.
Try to use options: -H yourhostname -C warn_age[,crit_age]
Daniel Johansson via observium wrote on 24.03.2020 16:04: Hi
I tried the http-check probe with ssl-test and I wonder if it's possible to change the hostname/webserver name it should probe for on the same host so I can verify other certs in the same server.
I tried adding -H www.webhost.comhttp://www.webhost.com but it doesn't seem to user that value.
Regards Daniel
________________________________ From: "observium" observium@observium.orgmailto:observium@observium.org To: "observium" observium@observium.orgmailto:observium@observium.org, "observium" observium@observium.orgmailto:observium@observium.org Cc: "Mike Stupalov" mike@observium.orgmailto:mike@observium.org Sent: Tuesday, March 24, 2020 1:13:08 PM Subject: Re: [Observium] - Possibility of https certificate validity alert?
Hi,
use probes (currently in Pro only) :)
[cid:image003.png@01D601FB.87353AC0]
edit: [cid:image004.png@01D601FB.87353AC0]
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19:
Hello everyone,
Was wondering if it possible for Observium to create an alert for https certificate validity check?
Anyone managed to do this or is it not possible?
In an ideal case I want an alert 90 days before the certificate expires.
With kind regards
David S.
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
-- Mike Stupalov Observium Limited, http://observium.org
_______________________________________________ observium mailing list observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
_______________________________________________
observium mailing list
observium@observium.orgmailto:observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
-- Mike Stupalov Observium Limited, http://observium.org
![](https://secure.gravatar.com/avatar/297845b5b755eb75a0aace74ac44aa0e.jpg?s=120&d=mm&r=g)
On Tue, Mar 24, 2020 at 07:05 Daniel Johansson via observium < observium@observium.org> wrote:
Hi
I tried the http-check probe with ssl-test and I wonder if it's possible to change the hostname/webserver name it should probe for on the same host so I can verify other certs in the same server.
I tried adding -H www.webhost.com but it doesn't seem to user that value.
Do you have /etc/hosts entries overriding your DNS so the connections all go to 127.0.0.1? Only thing I can think of.
Regards Daniel
*From: *"observium" observium@observium.org *To: *"observium" observium@observium.org, "observium" < observium@observium.org> *Cc: *"Mike Stupalov" mike@observium.org *Sent: *Tuesday, March 24, 2020 1:13:08 PM *Subject: *Re: [Observium] - Possibility of https certificate validity alert?
Hi,
use probes (currently in Pro only) :)
edit:
options: /usr/lib/nagios/plugins/check_http -h
you need to install: sudo apt install nagios-plugins
David Schrok via observium wrote on 24.03.2020 14:19:
Hello everyone,
Was wondering if it possible for Observium to create an alert for https certificate validity check? Anyone managed to do this or is it not possible?
In an ideal case I want an alert 90 days before the certificate expires.
With kind regards
David S.
observium mailing listobservium@observium.orghttp://postman.memetic.org/cgi-bin/mailman/listinfo/observium
-- Mike Stupalov Observium Limited, http://observium.org
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium _______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
participants (5)
-
Christian Eriksson
-
Daniel Johansson
-
David Schrok
-
Michael Loftis
-
Mike Stupalov