atc0005/check-cert

Issues

• Add support for Encrypted Client Hello (ECH)

  #882 opened 3 months ago by atc0005
  0

• Add support for considering connection / timeout related errors as `UNKNOWN` state

  #878 opened 3 months ago by atc0005
  1

• lscert | Add support for parsing/displaying CSR files

  #449 opened 2 years ago by atc0005
  1

• Add support for evaluating certificate files in DER format

  #862 opened 4 months ago by atc0005
  0

• Consider adding support for retrieving intermediate certificates using the `Authority Information Access` (AIA) field of compatible certificates

  #705 opened 10 months ago by atc0005
  1

• internal\certs\certs.go:348:12: nilness: tautological condition: nil == nil (govet)

  #816 opened 6 months ago by atc0005
  0

• internal\certs\certs.go:955:30: nilness: tautological condition: nil == nil (govet)

  #817 opened 6 months ago by atc0005
  0

• Add life remaining percentage to end of cert formatted expiration status line

  #807 opened 6 months ago by atc0005
  0

• Add cert lifetime metrics

  #792 opened 6 months ago by atc0005
  0

• Add support for cert lifetime percentage based thresholds

  #789 opened 7 months ago by atc0005
  0

• cmd\certsum\certcheck.go:197:6: unused-parameter: parameter 'portscanResult' seems to be unused (revive)

  #764 opened 7 months ago by atc0005
  0

• Validation for single port flag mistakenly applied to certsum

  #740 opened 8 months ago by atc0005
  0

• Certificate thumbprint and key ID values incorrectly listed with colon separated pairs missing leading 0 (where applicable)

  #706 opened 10 months ago by atc0005
  1

• Add support for asserting that all given certificates are present for a specified site

  #702 opened 10 months ago by atc0005
  1

• Update certificate "report" format to indicate SANs list count for `SANs entries` line

  #630 opened a year ago by atc0005
  0

• Update RPM `postinstall.sh` script to use `restorecon` in place of `chcon`

  #532 opened a year ago by atc0005
  1

• Add advice for `connect: connection refused` error

  #591 opened a year ago by atc0005
  1

• Add advice for `read: connection reset by peer` error

  #585 opened a year ago by atc0005
  1

• Formatted expiration has stray leading space when only hours remain

  #579 opened a year ago by atc0005
  0

• errwrap linting errors: `call could wrap the error with error-wrapping directive %w`

  #564 opened a year ago by atc0005
  2

• internal/certs/validation-results.go:693:47: unused-parameter: parameter 'verbose' seems to be unused, consider removing or renaming it as _ (revive)

  #554 opened a year ago by atc0005
  0

• internal/certs/validation-sans.go:82:2: unused-parameter: parameter 'dnsName' seems to be unused, consider removing or renaming it as _ (revive)

  #555 opened a year ago by atc0005
  0

• internal/config/logging.go:142:2: if-return: redundant if ...; err != nil check, just return error instead. (revive)

  #553 opened a year ago by atc0005
  0

• cmd/certsum/certcheck.go:89:2: unused-parameter: parameter 'rateLimiter' seems to be unused, consider removing or renaming it as _ (revive)

  #552 opened a year ago by atc0005
  0

• Makefile: Compress binaries & use static filenames

  #470 opened 2 years ago by atc0005
  0

• Makefile | Include `dev` packages with future stable releases

  #541 opened 2 years ago by atc0005
  0

• Update handling of performance data metrics to allow emitting negative expiration values

  #529 opened 2 years ago by atc0005
  0

• Audit plugin exit states to determine if another state (e.g., UNKNOWN) would be more applicable

  #464 opened 2 years ago by atc0005
  1

• chcon: can't apply partial context to unlabeled file '/usr/lib64/nagios/plugins/check_cert'

  #509 opened 2 years ago by atc0005
  3

• Implement support for setting AppArmor values for installed plugins

  #533 opened 2 years ago by atc0005
  0

• Explicitly ignoring OK/passing validation results does not work

  #525 opened 2 years ago by atc0005
  2

• Setting up an "expiration only" monitoring configuration for a self-signed certificate without SANs entries fails unless `ignore-hostname-verification-if-empty-sans` flag is specified

  #505 opened 2 years ago by atc0005
  1

• Open upstream Request For Enhancement to export a sentinel error (or constant) for `x509: certificate relies on legacy Common Name field, use SANs instead`

  #520 opened 2 years ago by atc0005
  0

• Update package generation to use `W.X.Y-Z` naming pattern

  #496 opened 2 years ago by atc0005
  1

• `sha256sum: WARNING: 1 listed file could not be read` error when attempting to validate package checksums

  #495 opened 2 years ago by atc0005
  1

• `ERROR 404: Not Found` when attempting to download DEB, RPM packages using links files

  #493 opened 2 years ago by atc0005
  1

• Research using event handler to process metrics from plugin

  #453 opened 2 years ago by atc0005
  3

• Makefile: Add recipe to generate "dev" packages

  #477 opened 2 years ago by atc0005
  1

• Makefile: Add missing "standard" recipes

  #471 opened 2 years ago by atc0005
  0

• Makefile: Replace (unneeded) `recursively expanded` variables with `simply expanded` variables

  #476 opened 2 years ago by atc0005
  0

• Add version details to Windows executables

  #473 opened 2 years ago by atc0005
  0

• Add `min` expiration lifetime value to `expires_leaf`, `expires_intermediate` performance data metrics

  #475 opened 2 years ago by atc0005
  0

• Generate RPM/DEB packages using nFPM

  #439 opened 2 years ago by atc0005
  1

• Emit "days remaining" and count of certificates type performance data metrics

  #445 opened 2 years ago by atc0005
  5

• Refactor logic for obtaining host value used to submit SNI-compatible cert chain request

  #463 opened 2 years ago by atc0005
  0

• SNI-required host value not set when server value is specified as IP Address and DNS Name *is* set properly

  #461 opened 2 years ago by atc0005
  1

• Add support for verifying revocation status

  #452 opened 2 years ago by atc0005
  0

• Add expiration validation test(s)

  #451 opened 2 years ago by atc0005
  0

• Add support for evaluating MSSQL certificates

  #438 opened 2 years ago by atc0005
  0

• Issues with `config.supportedLogLevels()` helper function

  #427 opened 2 years ago by atc0005
  0