- Description:
I’m trying to get LibreNMS to monitor the cert expiry against an nginx-backed reverse-proxy server, which serves multiple domains. When I issue the same commands at the CLI, as are passed via the Services python script, I get different certs passed back to me, so the results are different for what seems to be an identical command. At this point, I am out of ideas as to where the fault could be, so I really need help here.
- Validate:
Component | Version |
---|---|
LibreNMS | 1.48.1-78-g5d3a28683 |
DB Schema | 2019_02_10_220000_add_dates_to_fdb (132) |
PHP | 7.2.10-0ubuntu0.18.04.1 |
MySQL | 5.7.25-0ubuntu0.18.04.2 |
RRDTool | 1.7.0 |
SNMP | NET-SNMP 5.7.3 |
====================================
[OK] Composer Version: 1.8.4
[OK] Dependencies up-to-date.
[OK] Database connection successful
[OK] Database schema correct
- check_ssl_cert version info:
:/usr/lib/nagios/plugins# ./check_ssl_cert -V
check_ssl_cert version 1.81.0
- CLI Command “/usr/lib/nagios/plugins/check_ssl_cert -H targetserver -A --sni www.domain2.com” results:
SSL_CERT OK - x509 certificate ‘*.domain2.com’ from ‘COMODO RSA Domain Validation Secure Server CA’ valid until Jun 14 23:59:59 2019 GMT (expires in 110 days)|days=110;;;;
- LibreNMS “./check-services.php -d” (ran as librenms user) results:
Nagios Service - 9
Request: ‘/usr/lib/nagios/plugins/check_ssl_cert’ ‘-H’ ‘targetserver’ ‘-A’ ‘–sni’ ‘www.domain2.com’
Perf Data - DS: days, Value: 89, UOM:
Response: SSL_CERT OK - x509 certificate ‘domain1.com’ from ‘Let’s Encrypt Authority X3’ valid until May 25 17:44:44 2019 GMT (expires in 89 days)
Service DS: {
“days”: “”
}
- Help!
So yeah, at this point, I don’t understand why I’m getting different behaviour here. It looks literally identical to me. Halp! D: