Zabbix 6, agent2, TLS certificate monitoring

[rsokoll]

Hi,

I'm pulling my hair out - I do not get it. I've read https://www.zabbix.com/documentation...eb-certificate
I can do

zabbix_get -s 127.0.0.1 -k web.certificate.get[google.com,,]

and parse the result with jq - so basically, it works.

But how in the world I get certificate monitoring, say, for google.com, into zabbix itself?
Somehow, I'm blind :-(

[Atsushi]

If you have newly installed Zabbix 6.0, please refer to the template "Website certificate by Zabbix agent 2".

https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/app/certificate_agent2?at=refs%2Fheads%2Frelease%2F6.0

[rsokoll]

OK, got it, thank you. Now I have another problem. Let's assume I want to monitor a Service that is run by another organization. Maybe a mailserver with webmail, submission and IMAPS. For service monitoring, I would use the address (or DNS name) of this server for the agent interface. But when I want to use the certificate template, it will not work, because the template needs an agent2 which actually performs the checks, correct? So either I can do service monitoring OR certificate monitoring, but not at he same host. Or am I wrong?