Comments (1)
Hi riahc3,
thank you very much for your feedback.
Instead of rather naming the certificate , I think the check should go against a IP and a port. Directing towards
something that might change such as a certificate key-pair name or a certificate thumbprint is not a good practice
while aiming directly at a IP (or FQDN) and a port is a better practice.
The orginal idea of the sslcert
subcommand was to create a check command, which allows to check all installed ssl certificates with a single command. This allows monitoring of all ssl certificates on the ADC, w/o the need to update the monitoring when a new certificate is deployed. This is especially useful in "classic enterprise environments", where the monitoring people and the ADC people are working in different departments.
The command fully relies on the information from the api response. There are a bunch of other (and better) monitoring plugins wich do SSL testing via TCP/HTTP (e.g. check_http
). I don't want to reinvent the wheel here and keep focusued on the NITRO api.
More detailed output. Even if returning a OK, I think the days left should still be shown. Hell, Id go as far as saying
showing the days left AND the date it expires. This allows a quick view on seeing if it expires on a weekday or weekend.
That shouldn't bee a great problem. Are you able to provide a patch for this?
Additionally checks such as if the self sign cert (if it is a self sign) has a valid CA on the Netscaler
Why do we need a the CA of a certificate on the NetScaler? Do you mean a validation of the chain? The NetScaler by default trust no one.
Cheers, Simon
from check_netscaler.
Related Issues (20)
- SDX Support HOT 1
- NetScaler UNKNOWN - 501 Protocol scheme 'proxyname' is not supported HOT 2
- Check that ACLs are Enabled HOT 2
- Server and Client Connection for ServiceGroups/Members/LBvServer/etc. HOT 2
- Alive? 12.1: Build 51.19 ? HOT 4
- Partition support HOT 10
- incorrect CRITICAL alert assignment HOT 1
- Linting in Travis CI pipeline (perltidy) HOT 1
- invalid perfdata values HOT 12
- interface support HOT 2
- Delete me
- Icinga2 issue with performance data HOT 1
- Interface perf data HOT 13
- Invalid comparison in ntp check
- NetScaler CRITICAL - state: no VPNvServer found in configuration HOT 2
- check_ntp_time: NTP CRITICAL: Offset unknown #329 HOT 1
- Check the expiry date of a local license file HOT 2
- Get particular information of hwinfo (like: nsversion or hwdescription) HOT 1
- Wrong CPUusagepcnt in 13.0 HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from check_netscaler.