Mirrors/Munin-Contrib
1
0
Fork 0
mirror of https://github.com/munin-monitoring/contrib.git synced 2025-07-21 10:39:53 +00:00
Code Issues Releases Wiki Activity

certificate_file_expiry: add option to ignore unexpanded patterns

Browse source 
this helps use the same configs on multiple nodes where not all the
patterns expand to existing files on all of them or when files are not
yet existing
This commit is contained in:
Andreas Perhab 2022-02-18 09:39:34 +01:00
parent 4b8b098288
commit d9701b4f6a
1 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
plugins/ssl/certificate_file_expiry
View file

@ -55,6 +55,9 @@ env.LOGARITHMIC "yes" enables the logarithmic display of values which is useful
long lived in respect to the warning level. e.g. a ca.crt that is valid for 10 years together with a crl.pem that is long lived in respect to the warning level. e.g. a ca.crt that is valid for 10 years together with a crl.pem that is
valid for only a few months combined with warning levels of 5 days. default is "yes" to disable set it to "no". valid for only a few months combined with warning levels of 5 days. default is "yes" to disable set it to "no".
env.IGNORE_UNEXPANDED_PATTERNS "yes" ignores patterns that did not expand to any files. this is useful to define one
config that handles multiple types of certs where only one pattern is used. default is "no".
=head1 Dependencies =head1 Dependencies
Dependencies: openssl Dependencies: openssl
@ -72,6 +75,7 @@ GPLv2
. "$MUNIN_LIBDIR/plugins/plugin.sh" . "$MUNIN_LIBDIR/plugins/plugin.sh"
LOGARITHMIC=${LOGARITHMIC:-yes} LOGARITHMIC=${LOGARITHMIC:-yes}
IGNORE_UNEXPANDED_PATTERNS=${IGNORE_UNEXPANDED_PATTERNS:-no}
if [ "$1" = "config" ] ; then if [ "$1" = "config" ] ; then
echo "graph_title Certificate validity" echo "graph_title Certificate validity"
@ -127,6 +131,16 @@ for cert in ${CERTS}; do
cert_type=${cert%:*} cert_type=${cert%:*}
cert_pattern=${cert#*:} cert_pattern=${cert#*:}
for cert_file in $cert_pattern; do for cert_file in $cert_pattern; do
# note: if file contains a * (e.g. /etc/letsencrypt/live/*/cert.pem) it might be an unexpanded pattern
# to supress errors see IGNORE_UNEXPANDED_PATTERNS above
# shellcheck disable=SC2063
if [ "$IGNORE_UNEXPANDED_PATTERNS" = "yes" ] \
&& [ "$cert_file" = "$cert_pattern" ] \
&& ! [ -e "$cert_file" ] \
&& echo "$cert_file" | grep -q "*" ; then
# skip unexpanded patterns when IGNORE_UNEXPANDED_PATTERNS is set to yes
continue
fi
if [ "$cert_type" = "openvpn_inline" ] ; then if [ "$cert_type" = "openvpn_inline" ] ; then
for type in "ca" "cert"; do for type in "ca" "cert"; do
cert_name=$(clean_fieldname "$cert_file-$type") cert_name=$(clean_fieldname "$cert_file-$type")