<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; "><div><div><div style="font-family: Calibri, sans-serif; font-size: 14px; ">Hello,</div><div style="font-family: Calibri, sans-serif; font-size: 14px; "><br></div><div style="font-family: Calibri, sans-serif; font-size: 14px; ">I am using the check_http plugin for checking the SSL cert expiry. Even if the cert is not due to expire very soon, the plugin reports as CRITICAL. </div><div style="font-family: Calibri, sans-serif; font-size: 14px; ">I have few more certs for which the plugin reports correct status. </div><div style="font-family: Calibri, sans-serif; font-size: 14px; "><br></div><div style="font-family: Calibri, sans-serif; font-size: 14px; ">What could be going wrong over here. ??</div><div style="font-family: Calibri, sans-serif; font-size: 14px; "><br></div><div style="font-family: Calibri, sans-serif; font-size: 14px; ">BAD</div><div style="font-family: Calibri, sans-serif; font-size: 14px; "><br></div><div><div><div style="font-family: Consolas; font-size: medium; "><div style="font-family: Consolas; font-size: medium; "># /usr/lib/nagios/plugins/check_http --ssl -H XX.XX.XX.XX -p 8001 -w 30 -c 30 -C 30</div><div style="font-family: Consolas; font-size: medium; ">CRITICAL - Certificate expired on 02/17/2062 22:44.</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; "><div style="font-family: Consolas; font-size: medium; "># openssl x509 -in abc.example.com.crt -noout –enddate</div><div style="font-family: Consolas; font-size: medium; ">notAfter=Feb 17 22:57:24 2062 GMT</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">GOOD</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; "><div style="font-family: Consolas; font-size: medium; "><div style="font-family: Consolas; font-size: medium; "># /usr/lib/nagios/plugins/check_http --ssl -H XX.XX.XX.XX -p 8000 -w 30 -c 30 -C 30</div><div style="font-family: Consolas; font-size: medium; ">OK - Certificate will expire on 02/09/2013 23:59.</div><div><br></div></div></div><div style="font-family: Consolas; font-size: medium; "><div style="font-family: Consolas; font-size: medium; "># openssl x509 -in xyz.example.com.crt -noout –enddate</div><div style="font-family: Consolas; font-size: medium; ">notAfter=Feb 10 23:59:59 2013 GMT</div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; ">Thanks</div><div style="font-family: Consolas; font-size: medium; ">Sunny</div><div style="font-family: Consolas; font-size: medium; "><br></div></div><div style="font-family: Consolas; font-size: medium; "><br></div></div><div style="font-family: Consolas; font-size: medium; "><br></div><div style="font-family: Consolas; font-size: medium; "><br></div></div><div style="font-family: Consolas; font-size: medium; "><br></div><div><font class="Apple-style-span" face="Consolas" size="2"><br></font></div></div></div></div></div></body></html>