Re: certificate monitoring

"[email protected]" <[email protected]> Sun, 24 May 2026 20:49:53 +0200
Newsgroups gmane.comp.monitoring.monit.general
Message-ID <[email protected]>
See the "certificate valid" option for the "port" test in the Monit =
manual:
https://mmonit.com/monit/documentation/monit.html#CONNECTION-TESTS

The following should work for SMTP with STARTTLS: will alert when the =
certificate is invalid, or when it will expire in less than 30 days:

	if failed
		port 25
		protocol smtps
		and certificate valid > 30 days
	then alert


Best regards,
Martin


> On 24. 5. 2026, at 20:30, Marco Moock <[email protected]> wrote:
>=20
> Am 24.05.26 um 18:51 schrieb [email protected]:
>> Checking the certificate validity on SMTP port with STARTTLS is =
possible though, and provides also the certificate integration testing, =
which I think is better than testing the certificate file only: if the =
SMTP will be configured for a different certificate file (e.g. old =
filename), or the SMTP server won't be restarted after the certificate =
was updated, the port test won't pass. Checking the file only is =
error-prone, I think.
>=20
> Can you give me a hint where I can find the documentation for that?
>=20
> --=20
> Gru=C3=9F
> Marco
> Muell und Spam bitte an [email protected]
> <OpenPGP_0x559E1A331A46B463.asc>