Xymon Mailing List Archive search

skip http check

3 messages in this thread

list Enzo Arroyo · Sun, 12 Aug 2018 20:58:13 +0200 ·
Hello all,

Have a little issue, look, have a host list that my intention is just monitor the SSL expire, this is my file:

0.0.0.0    server.lan    # noconn https://server.lan
0.0.0.0 server1.lan    # noconn https://server1.lan

But this create 2 checks, http and sslcert, I need just sslcert, I fix it temporary using NOCOLUMNS:http, but this just hidden the col, how can I do for skip this check and check just the sslcert?

Thank you, best regards,
list John Thurston · Mon, 13 Aug 2018 08:08:49 -0800 ·
There is no test built into xymon to monitor only the certificate.
I'm using a script taken (and modified) from deadcat.net (long gone). Look at xymonton.org or list archives for suggestions. As I recall, my script rips through the hosts file looking for ssl[:port] tags on hosts. It then makes an openssl s_client call to grab the cert, parse, and evaluate the results.


I hesitate to share a copy of my script here, as it runs on Solaris, is ancient, and uses a whole bunch of crudgy Big Brother references.

--
    Do things because you should, not just because you can.

John Thurston    XXX-XXX-XXXX
user-ce4d79d99bab@xymon.invalid
Department of Administration
State of Alaska
quoted from Enzo Arroyo

On 8/12/2018 10:58 AM, Enzo Arroyo wrote:
Hello all,

Have a little issue, look, have a host list that my intention is just monitor the SSL expire, this is my file:

0.0.0.0    server.lan    # noconn https://server.lan
0.0.0.0 server1.lan    # noconn https://server1.lan

But this create 2 checks, http and sslcert, I need just sslcert, I fix it temporary using NOCOLUMNS:http, but this just hidden the col, how can I do for skip this check and check just the sslcert?

Thank you, best regards,
list Scott Birl · Mon, 13 Aug 2018 16:31:57 +0000 ·
quoted from Enzo Arroyo
From: Xymon <xymon-bounces at xymon.com> On Behalf Of Enzo Arroyo
Sent: Sunday, August 12, 2018 02:58 PM
To: xymon at xymon.com
Subject: [Xymon] skip http check

Hello all,

Have a little issue, look, have a host list that my intention is just monitor the SSL expire, this is my file:

0.0.0.0    server.lan    # noconn https://server.lan
0.0.0.0    server1.lan    # noconn https://server1.lan

But this create 2 checks, http and sslcert, I need just sslcert, I fix it temporary using NOCOLUMNS:http, 
but this just hidden the col, how can I do for skip this check and check just the sslcert?

Thank you, best regards,
Have you tried httphead and HIDEHTTP?

Untested:
0.0.0.0 server.lan # noconn httphead;https://server.lan HIDEHTTP


Scott Birl
Senior Systems Administrator
Information Technology Services
Temple University