alt-dima/https-ssl-cert-check-zabbix

Script to check validity and expiration of TLS/SSL certificate on site. May be used with Zabbix or standalone.

Provides

Auto discovery from domains.txt.

Items prototypes

• ssl ttl for {#DOMAIN} - number of days before the expiration date or -65535 if error

Trigger prototypes

• low or bad ttl for ssl certificate for {#DOMAIN} - expires in 7 days or less or error in fetching

---

Installation

cd /opt
git clone https://github.com/altuhovsu/https-ssl-cert-check-zabbix
echo "google.com:143/imap" > https-ssl-cert-check-zabbix/domains.txt # add some domains and ports/protocol
echo "google.com:443" > https-ssl-cert-check-zabbix/domains.txt # add some domains and ports/protocol
chown -R zabbix:zabbix https-ssl-cert-check-zabbix
cp https-ssl-cert-check-zabbix/userparameters_ssl_cert_check.conf /etc/zabbix/zabbix_agent2.d/userparameters_ssl_cert_check.conf
crontab -u zabbix -l | (cat - ; echo "*/10 * * * * /opt/https-ssl-cert-check-zabbix/cron.sh &> /dev/null") | crontab -u zabbix -
sudo -u zabbix https-ssl-cert-check-zabbix/cron.sh
systemctl restart zabbix-agent2

Import template_zabbix-https-checker.yaml to zabbix server and link with your host.

Based on the projects:

• https-ssl-cert-check-zabbix
• zabbix-https-checker.