This asset is forked from an upstream project at https://github.com/sensu-plugins/sensu-plugins-ssl that does not yet exist as a Bonsai asset.
forked from https://github.com/sensu-plugins/sensu-plugins-ssl
v1.0.0 · public · Published over 2 years ago
This fork is automatically tested, built and published to RubyGems and Bonsai.
Check that a specific website is chained to a specific root certificate (Let's Encrypt for instance). Requires the
openssl commandline tool to be available on the system.
./bin/check-ssl-anchor.rb -u example.com -a "i:/O=Digital Signature Trust Co./CN=DST Root CA X3"
Checks a CRL has not or is not expiring by inspecting it's next update value.
You can check against a CRL file on disk:
./bin/check-ssl-crl -c 300 -w 600 -u /path/to/crl
or an online CRL:
./bin/check-ssl-crl -c 300 -w 600 -u http://www.website.com/file.crl
Critical and Warning thresholds are specified in minutes.
Checks the ssllabs qualysis api for grade of your server, this check can be quite long so it should not be scheduled with a low interval and will probably need to adjust the check
timeout options per the check attributes spec based on my tests you should expect this to take around 3 minutes.
./bin/check-ssl-qualys.rb -d google.com
Check that a specific website is chained to a specific root certificate issuer. This is a pure Ruby implementation, does not require the openssl cmdline client tool to be installed.
./bin/check-ssl-root-issuer.rb -u example.com -a "CN=DST Root CA X3,O=Digital Signature Trust Co."
To run the testing suite, you'll need to have a working
bundler installed. We use
rake to run the
rspec tests automatically.
bundle install bundle update bundle exec rake
bin/check-ssl-host.rb would be good to run in combination with each other to test that the chain is anchored to a specific certificate and each certificate in the chain is correctly signed.
Please describe the reason for reporting this asset. Our moderators will be notified and will disable the asset if it is found to be inappropriate.×