LEFT | RIGHT |
1 #!/bin/sh | 1 #!/bin/sh |
2 | 2 |
3 # Icinga plugin that checks how many days are left | 3 # Icinga plugin that checks how many days are left |
4 # until SSL certificate expires. | 4 # until SSL certificate expires. |
5 # Usage: | 5 # Usage: |
6 # $PLUGIN_DIR/check_ssl_cert.sh -H $HOST -P $PORT -c $CRITICAL -w $WARNING | 6 # $PLUGIN_DIR/check_ssl_cert.sh -H $HOST -P $PORT -c $CRITICAL -w $WARNING |
7 | 7 |
8 get_ssl_expiry_date() { | 8 get_ssl_expiry_date() { |
9 openssl s_client -connect "$1:$2" </dev/null 2>/dev/null \ | 9 openssl s_client -connect "$1:$2" </dev/null 2>/dev/null \ |
10 | openssl x509 -noout -enddate 2>/dev/null | 10 | openssl x509 -noout -enddate 2>/dev/null |
11 } | 11 } |
12 | 12 |
13 CURRENT_DATE=`date +%y%m%d` | 13 CURRENT_DATE=`date +%y%m%d` |
14 HOST="$2" | 14 HOST="$2" |
15 PORT="$4" | 15 PORT="$4" |
16 CRITICAL="$6" | 16 CRITICAL="$6" |
17 WARNING="$8" | 17 WARNING="$8" |
18 STATE_OK=0 | 18 STATE_OK=0 |
19 STATE_WARNING=1 | 19 STATE_WARNING=1 |
20 STATE_CRITICAL=2 | 20 STATE_CRITICAL=2 |
21 STATE_UNKNOWN=3 | 21 STATE_UNKNOWN=3 |
22 OUTPUT=`get_ssl_expiry_date "$HOST" "$PORT"` | 22 OUTPUT=`get_ssl_expiry_date "$HOST" "$PORT"` |
23 | 23 |
24 if [ -z "$OUTPUT" ] | 24 if [ -z "$OUTPUT" ] |
25 then | 25 then |
26 echo "UNKNOWN - Could not connect to $HOST via port $PORT" | 26 echo "UNKNOWN - Could not connect to $HOST via port $PORT" |
27 exit "$STATE_UNKNOWN" | 27 exit "$STATE_UNKNOWN" |
28 fi | 28 fi |
29 | 29 |
30 DAY=`echo "$OUTPUT" | awk '{print $2}'` | 30 DAY=`echo "$OUTPUT" | awk '{printf "02d", $2}'` |
31 MONTH=`echo "$OUTPUT" | awk '{print $1}' | cut -c 10-` | 31 MONTH=`echo "$OUTPUT" | awk '{print $1}' | cut -c 10-` |
32 YEAR=`echo "$OUTPUT" | awk '{print $4}'` | 32 YEAR=`echo "$OUTPUT" | awk '{print $4}'` |
33 | |
34 if [ "$DAY" -lt 10 ] | |
35 then | |
36 DAY="0$DAY" | |
37 fi | |
38 | 33 |
39 case "$MONTH" in | 34 case "$MONTH" in |
40 | 35 |
41 "Jan") | 36 "Jan") |
42 MONTH="01" | 37 MONTH="01" |
43 ;; | 38 ;; |
44 "Feb") | 39 "Feb") |
45 MONTH="02" | 40 MONTH="02" |
46 ;; | 41 ;; |
47 "Mar") | 42 "Mar") |
(...skipping 45 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
93 echo "WARNING - $HOST: SSL certificate will be expired in $DIFFERENCE days!" | 88 echo "WARNING - $HOST: SSL certificate will be expired in $DIFFERENCE days!" |
94 exit "$STATE_WARNING" | 89 exit "$STATE_WARNING" |
95 elif [ "$DIFFERENCE" -gt "$WARNING" ] | 90 elif [ "$DIFFERENCE" -gt "$WARNING" ] |
96 then | 91 then |
97 echo "OK - $HOST: SSL certificate will be expired in $DIFFERENCE days" | 92 echo "OK - $HOST: SSL certificate will be expired in $DIFFERENCE days" |
98 exit "$STATE_OK" | 93 exit "$STATE_OK" |
99 else | 94 else |
100 echo "UNKNOWN - $HOST: Could not retrieve data" | 95 echo "UNKNOWN - $HOST: Could not retrieve data" |
101 exit "$STATE_UNKNOWN" | 96 exit "$STATE_UNKNOWN" |
102 fi | 97 fi |
LEFT | RIGHT |