SSL Certificate Checker

[cmesaros]

Hello,

I want to use SSL Certificate Checker to monitor all certificates expiration date from my networks. It is possible this?

Best regards,
Cristian

[jkat54]

The app currently supports checking expiration dates of local certificates only. If you have a host with all the certs, you could use it on that host to monitor all the certs (PKI machines might have all your certs for example).

I'll add this as an enhancement request for the next time I write code for this app though.

If this answers your question, please let us know by
marking as the answer and maybe upvoting too.

[cmesaros]

Thanks for your fast answer. I have IPA servers can I read certificates from there?

Thanks a lot.

Best regards,
Cristian

[jkat54]

Do you have *.pem files on the ISA for all the certs?

[cmesaros]

No. IPA is equivalent to FreeIPA ( integrated Identity and Authentication solution for Linux). IPA stores all certificates in certificate database.

Thanks a lot.

[jkat54 · Accepted solution]

Yeah this app won't help you then, sorry!

Nice use case though. I do have the commands for remotely checking an expiry date on ssl certs. Would you like those for reference? Maybe you can write your own script.

[bballad]

I am looking at a similar use case. Do you mind sharing those commands?

[jkat54]

echo | openssl s_client -connect someserver:443 2>/dev/null | openssl x509 -noout -enddate

[bballad]

Thanks