Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

SSL Certificate Expiration Monitor bash script for Linux OS

Does anyone have a working Bash script or other method they use to monitor the SSL certificate expiration date on Linux servers? I'm not a Linux admin but our IT Linux team can assist with modifying anything you may already have. I'd like the ability to alert on it too using the Warning/Critical threshold options as the date gets closer to expiring. I've checked what Thwack has but can't find anything other than generic SolarWinds URLs for setting up Linux Script Monitors. Thanks

Find more posts tagged with

Accepted answers

All comments

donrobert5

I don't have one, but you can try this link if it can help you get to it.

thwack.solarwinds.com/.../what-s-the-best-way-to-monitor-ssl-certificates-on-linux-devices

mesverrum

You can rework the script mentioned in this thread so instead of using the ${Node.DNS} variable you just hard code the DNS name of the linux server you want it to try and access.
thwack.solarwinds.com/.../does-solarwinds-linux-agent-monitor-certificate

alanmpadgett

This script mentioned here is PowerShell, which doesn't work on Linux OS.

mesverrum

Your polling engine is a windows server and it would connect to the target over https to get the cert, doesnt matter what OS is on the target server.

Fred.Loucks

Not the best solution, but you could potentially create a Custom Table widget. If a cert is 90 days out or less, It will display in the table. This query only pulls from SAM but it seems to pick up both Windows and Linux (agent ran) stuff. You might have to join tables/enties from VMAN or other modules. Again, probably not the best solution but it will display server name with cert expiration date ( if expiration) in/under 90 days.

SELECT nd.Caption, nd.IP_Address, ccs.StatisticData AS 'Days Remaining',
LEFT(SUBSTRING(ErrorMessage,
CHARINDEX(':',ErrorMessage)+1,15),
CHARINDEX('/',ErrorMessage)) AS 'Expiration Date'
FROM [dbo].[APM_CurrentComponentStatus] ccs
JOIN [APM_Component] c ON c.ID = ccs.ComponentID
JOIN [APM_Application] a ON a.ID = c.ApplicationID
JOIN [NodesData] nd ON nd.NodeId = a.NodeID
WHERE c.ComponentType = '48' AND ccs.StatisticData < '90' AND NOT ccs.StatisticData = '0'
ORDER BY ccs.StatisticData

routermonkey

and PowerShell has been available for *nix for about a decade.