Xymon Mailing List Archive search

RDP TLS cert monitoring

list Grant Taylor
Thu, 26 Sep 2024 14:07:34 -0500
Message-Id: <user-e158abf321d5@xymon.invalid>

Hi J,

On 9/25/24 8:26 PM, Jeremy Laidman wrote:
I'd be surprised if you couldn't use https://<IP>:3389/ and get some kind of useful result.
I'll check that out.
You can use the "ssl" keyword in protocols.cfg and that checks the certificate. Something like this:

[rdps]
         port 3389
         options ssl
         send "QUIT\r\n"
I'll check that out too.
The "send" line is not necessary, but it lets the RDP endpoint close the session, and might avoid error logs being added to the event logs.
ACK

Thank you J, you've given me some things to check to monitor the TLS cert on servers that aren't restarted often enough for the built-in renew function to happen.


-- 
Grant. . . .
unix || die