Re: certificate monitoring

SZÉPE Viktor <[email protected]> Sun, 24 May 2026 18:58:14 +0200
Newsgroups gmane.comp.monitoring.monit.general
Message-ID <[email protected]>
This is a cryptographically signed message in MIME format.

--=_lZfajF-OC5C3jlI-N4Ld7gY
Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Sorry, but I can't resist sharing my certificate monitoring script!

https://github.com/szepeviktor/debian-server-tools/blob/master/monitoring/c=
ert-expiry.sh


Id=C3=A9zem/Quoting [email protected]:

> Hello Marco,
>
> as Lutz mentioned, Monit doesn't allow checking the certificate file itse=
lf.
>
> Checking the certificate validity on SMTP port with STARTTLS is=20=20
>=20possible though, and provides also the certificate integration=20=20
>=20testing, which I think is better than testing the certificate file=20=
=20
>=20only: if the SMTP will be configured for a different certificate=20=20
>=20file (e.g. old filename), or the SMTP server won't be restarted=20=20
>=20after the certificate was updated, the port test won't pass.=20=20
>=20Checking the file only is error-prone, I think.
>
> Best regards,
> Martin
>
>
>> On 24. 5. 2026, at 10:14, Marco Moock <[email protected]> wrote:
>>
>> Am 24.05.26 um 09:42 schrieb Lutz Mader via This is the general=20=20
>>=20mailing list for monit:
>>
>>> sorry, you cannot validate a certificate using a service check file.
>>> But, that sounds like a useful feature.
>>> You should describe your request in more detail and submit it as a
>>> feature suggestion/request.
>>
>> My idea was just to run openssl (or similar) to check the validity=20=20
>>=20and then provide a way to alert, like it exists for disk usage etc.
>>
>>
>>> https://mmonit.com/monit/documentation/monit.html#File
>>
>> This feature could be used for a workaround with a script that=20=20
>>=20creates a file if the validity is too low etc.
>>
>>
>> --
>> Gru=C3=9F
>> Marco
>> Muell und Spam bitte an [email protected]
>> <OpenPGP_0x559E1A331A46B463.asc>



SZ=C3=89PE Viktor, webes alkalmaz=C3=A1s =C3=BCzemeltet=C3=A9s / Running yo=
ur application
https://github.com/szepeviktor/debian-server-tools/blob/master/CV.md
~~~
=C3=BCgyelet =F0=9F=8C=B6=EF=B8=8F hotline: +36-20-4242498  [email protected]  =
skype: szepe.viktor
Budapest, III. ker=C3=BClet





--=_lZfajF-OC5C3jlI-N4Ld7gY
Content-Type: application/pkcs7-signature; name=smime.p7s
Content-Description: S/MIME Signature
Content-Disposition: attachment; filename=smime.p7s
Content-Transfer-Encoding: base64
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--=_lZfajF-OC5C3jlI-N4Ld7gY--