Monitoring SSL certificate validity

[batosai]

Hi,

I'm trying to monitor the validity of certificates and trigger a warning a few days before they need to be renewed.

I created an item :
system.run[openssl s_client -connect hostnameort 2>/dev/null | openssl x509 -noout -enddate | cut -d= -f 2]

It works and stores the expiration date in "latest data" with the following format :
Sep 12 08:45:04 2012 GMT

However, I'm stuck with the item creation. Any idea how I can create the following expression ? : X - current time < 5 days

Regards

[themons]

You may have a look to this

http://www.zabbix.com/forum/showthread.php?t=15694&highlight=ssl-check-cert.sh

[batosai]

Thanks, I read that. But I was trying to get rid of custom scripts as much as possible.

I'm migrating from an old Nagios with hundreds of scripts, of varying quality...
I was able to replace about 90% of them, thanks to the zabbix_agent, and now I'm starting to scratch the 10% left. I guess this one will have to survive a bit more

Thank you for your time.