Olivier Mehani
94066132ce
[ssl-certificate-expiry] add env.skip_cert_hashes to skip certificates
...
This fix allows to skip validity checks on any intermediate certificate
which subject hash appears in the list.
Let's Encrypt certificates are cross-signed by both DST Root CA X3 and
ISRG Root X1. DST Root CA X3 has expired on 2021-09-30 [0], which causes
the plugin to incorrectly report some full-chain LE certificates as
expired.
[0] https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
Signed-off-by: Olivier Mehani <shtrom@ssji.net>
2021-12-31 19:26:58 +01:00
Adam Mizerski
09974133b3
ssl-certificate-expiry: fix handling domains starting with digits
...
resolves #1224
2021-07-14 21:25:22 +02:00
Nazdravi
f0479a9a7d
[ssl-certificate-expiry] host name verification + proxy connection ( #1126 )
...
* optional verification of request to certificate hostname match (env.checkname yes)
* optional openssl proxy usage (env.proxy PROXYHOST:PORT)
2020-10-31 23:41:06 +01:00
Martin Schobert
bba98f95b3
ssl-certificate-expiry: Feature added: checking intermediate certs as well ( #1088 )
2020-09-06 22:19:12 +02:00
Lars Kruse
52144bc277
ssl-certificate-expiry: remove hardcoded CA directory path
...
This should allow the plugin to be usable on all platforms.
2020-02-06 00:54:29 +01:00
Lars Kruse
292cfb955a
ssl-certificate-expiry: add support for FreeBSD's "date"
...
Thanks to oz42
Closes : #1038
2020-01-25 01:22:11 +01:00
Olivier Mehani
0b4725d69d
[ssl/ssl-certificate-expiry] Fix unset starttls parameter
...
Signed-off-by: Olivier Mehani <shtrom@ssji.net>
2019-10-03 17:28:04 +02:00
ruliane
3aa213d497
Add support for StartTLS in ssl-certificate-expiry ( #1018 )
...
* Add support for StartTLS in ssl-certificate-expiry
Added support for StartTLS in ssl-certificate-expiry
Use env.services foo.example.net_25_smtp to enable StartTLS on a SMTP server.
2019-09-17 19:37:37 +02:00
Lars Kruse
7fed3b9765
Fix multiple shellcheck issues
2019-08-13 05:16:13 +02:00
Olivier Mehani
7e995a0210
squash! squash! [ssl-certificate-expiry] Add asynchronous update via cron
...
* use find to detect only recent cache files
* reduce cron periodicity to an hour
* use variable instead of TMP file
2019-07-22 22:15:20 +10:00
Olivier Mehani
793b75b9ee
squash! [ssl-certificate-expiry] Add asynchronous update via cron
...
revert local
2019-07-22 22:07:43 +10:00
Olivier Mehani
59f057f88b
[ssl-certificate-expiry] Add asynchronous update via cron
...
Also, cleanup the script to be better POSIX sh compatible, and add -u to
the shebang.
2019-07-20 22:51:56 +10:00
Lars Kruse
e7eb28869c
plugins ssl_ and ssl-certificate-expiry: various improvements
...
* simplify date parsing: use "date" instead of awk's "mktime" (requires gawk)
* simplify structure
* use the same function (copy'n'paste) for both plugins
Closes : #893
2018-03-30 01:53:48 +02:00
Olivier Mehani
81e1966814
[ssl] Remove legacy ssl, and replacement ssl-certificate-expiry
...
Signed-off-by: Olivier Mehani <shtrom@ssji.net>
2017-07-23 13:19:40 +10:00
Olivier Mehani
332396976b
fixup! [multi-ssl] Backward compatibility with ssl_
2017-06-21 21:32:48 +10:00
Olivier Mehani
21cc6fc458
[ssl-certificate-expiry] Rename from multi_ssl
...
Signed-off-by: Olivier Mehani <shtrom@ssji.net>
2017-06-20 21:15:17 +10:00
