check_http issue

Jeffrey Watts jeffrey.w.watts at gmail.com
Mon Mar 12 18:58:12 CET 2012


I wonder if it's an epoch thing...   Are all of the certs that are failing
ones in which the expiry year is 2038 or greater?

Jeffrey.

On Mon, Mar 12, 2012 at 4:04 AM, Sunny Jaisinghani <
Sunny_Jaisinghani at symantec.com> wrote:

> Hello,
>
> I am using the check_http plugin for checking the SSL cert expiry. Even if
> the cert is not due to expire very soon, the plugin reports as CRITICAL.
> I have few more certs for which the plugin reports correct status.
>
> What could be going wrong over here. ??
>
> BAD
>
> # /usr/lib/nagios/plugins/check_http --ssl -H XX.XX.XX.XX  -p 8001 -w 30
> -c 30 -C 30
> CRITICAL - Certificate expired on 02/17/2062 22:44.
>
> # openssl x509 -in abc.example.com.crt -noout –enddate
> notAfter=Feb 17 22:57:24 2062 GMT
>
> GOOD
>
> # /usr/lib/nagios/plugins/check_http --ssl -H XX.XX.XX.XX  -p 8000 -w 30
> -c 30 -C 30
> OK - Certificate will expire on 02/09/2013 23:59.
>
> # openssl x509 -in xyz.example.com.crt -noout –enddate
> notAfter=Feb 10 23:59:59 2013 GMT
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20120312/d06bde26/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null


More information about the Users mailing list