Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Query: APM:: Certificate Monitor

Hi,

Is it possible to monitor the status of ssl certs on a website so that you can set up an alert to warn you when it is near to expiry.

Regards

Miron

Find more posts tagged with

certificate

apm

certificate_ssl_website_https

Accepted answers

FormerMember

You can do it with a script:

Here is a sample script that does what they want but will need to be tweaked for APM

http://weblogs.asp.net/mikedopp/archive/2008/06/18/how-to-check-certificate-expirations-on-iis-with-custom-script.aspx

All comments

FormerMember

You can do it with a script:

Here is a sample script that does what they want but will need to be tweaked for APM

http://weblogs.asp.net/mikedopp/archive/2008/06/18/how-to-check-certificate-expirations-on-iis-with-custom-script.aspx

Miron

Denny,

Unless im mistaken it looks like this is a script that that runs on the target server rather than on the orion server.

Is this right.

Miron

ShamChauthani

Correct, assumption is that the certificate you are trying to verify is "installed" on the APM poller.

Miron

Sham,

Nope personally would find very little use of that. Looking for script to query remote urls and determine cert status. Similar to the one available for nagios.

Miron

ShamChauthani

Since you have found the Nagios script that does what you need, you can use the External Script processing functionality in APM to execute the Nagios script.

Here is some info Roger pulled out about our External Script Processing functionality

http://www.solarwinds.com/netperfmon/SolarWinds/ApplicationPerformanceMonitorAdministratorGuide.9.35.htm

Example Scripts

There are several sample scripts are installed with Orion APM you can use to create Linux/Unix script component monitors. These sample scripts are installed on your Orion APM server, in the folder:C:\Program Files\Solarwinds\Orion\APM\SampleScriptMonitors

ScriptProcessorForNagios(tm).pl

1. Download the Nagios script you want to use to the server you want to monitor. Save the file in an appropriate path such as /usr/local/bin/nagiosScriptName.

2. Change the file system mode (chmod) to make the script executable.

3. Test the Nagios script to make sure it works, specifying any necessary command line parameters.

4. Add a Linux Script component monitor to an existing application monitor template.

5. Paste the contents of the ScriptProcessorForNagios(tm).pl file into the Script Body field.

6. Type ${Script} /usr/local/bin/nagiosScriptName in the Command Line field, followed by any necessary command line parameters. For example:
${Script} /usr/local/bin/check_mysql_stats -H localhost -U MyUser -P MyPassword -w 80 -c 75 –t

Miron

Hi,

Thanks mate but;

The problem with the method above is that it relies on a script run on the target server itself rather than

the script running on APM. A large number of scripts for nagios are written in Perl and those that run from the poller do not lend themselves to being run on APM due to issues between WScript and Perl(with external calls to libraries etc)

Thanks anyway :-)

Miron

anachronism

Sorry if it's a bit late, but I had a similar problem myself recently. I have coded a solution (though it's not as neat as it could be). It relies on having the openssl binary installed, and uses that to retrieve the certificate from a remote server. The number of days till expiry is returned as the Statistic (so it's a kind of boring graph ), but means you can put a warning and critical alert in to prompt you to renew the cert.

It's uploaded to thwack, so you can take a look if you like. It's not neat, but I can try to provide support if required.

Cheers,

Grant.