topic Re: SSL Certificate Checker in All Apps and Add-ons

SSL Certificate Checker

cmesaros — Mon, 13 Jan 2020 10:36:32 GMT

Hello,

I want to use SSL Certificate Checker to monitor all certificates expiration date from my networks. It is possible this?

Best regards,
Cristian

Re: SSL Certificate Checker

jkat54 — Mon, 13 Jan 2020 13:35:07 GMT

The app currently supports checking expiration dates of local certificates only. If you have a host with all the certs, you could use it on that host to monitor all the certs (PKI machines might have all your certs for example).

I'll add this as an enhancement request for the next time I write code for this app though.

If this answers your question, please let us know by
marking as the answer and maybe upvoting too.

Re: SSL Certificate Checker

cmesaros — Mon, 13 Jan 2020 13:53:29 GMT

Thanks for your fast answer. I have IPA servers can I read certificates from there?

Thanks a lot.

Best regards,
Cristian

Re: SSL Certificate Checker

jkat54 — Mon, 13 Jan 2020 14:07:05 GMT

Do you have *.pem files on the ISA for all the certs?

Re: SSL Certificate Checker

cmesaros — Mon, 13 Jan 2020 14:28:12 GMT

No. IPA is equivalent to FreeIPA ( integrated Identity and Authentication solution for Linux). IPA stores all certificates in certificate database.

Thanks a lot.

Re: SSL Certificate Checker

jkat54 — Mon, 13 Jan 2020 19:21:23 GMT

Yeah this app won't help you then, sorry!

Nice use case though. I do have the commands for remotely checking an expiry date on ssl certs. Would you like those for reference? Maybe you can write your own script.

Re: SSL Certificate Checker

bballad — Mon, 14 Dec 2020 20:08:19 GMT

I am looking at a similar use case. Do you mind sharing those commands?

Re: SSL Certificate Checker

jkat54 — Tue, 29 Dec 2020 14:05:32 GMT

echo | openssl s_client -connect someserver:443 2>/dev/null | openssl x509 -noout -enddate

Re: SSL Certificate Checker

bballad — Tue, 29 Dec 2020 14:47:19 GMT

Thanks