SSL Certificates check?

[admin_locean]

We would like to check the SSL Certificatesof our servers.
I found an external script on Zabbix Share that semmes to suite very well for this purpose :

https://share.zabbix.com/cat-app/web-servers/ssl-certificates-check

But now we have some problem how implement it to our cse with a lot of servers to check.
I posted already a comment on "Zabbix share" page, but it seems that nobody monitor it. So may be here somebody could help.

The external scrit works well and we could I could create an item to use this external script to check SSL certificat of one server. So far, so good.
But we have a lot of servers, so add them item by item it's not good.

So I add template "Template SSL Cert Check External" to our zabbix server.

I define in Macros section :
{$HOST.CONN} and {$SNI}
for one of my servers.
It works as well.

But the problem how to check anothers servers using the same template? I could not define several macros with the same name...
So probably I don't understand how I should use this template properly.

Could you give a clue?

Thanks in advance

[Colttt]

sorry but i dont know what you mean, you must assign each host to this template and must also install this script to each host!

[admin_locean]

Sure, it could be a solution.
But finally it's even harder than define a manually each item for each SSL-check-server.

In your solution I need also copy external script on each host and be sure to put the correct permissions.


So it seems that it's not possible to create SSL-checks for a lot of servers using Template.

But, may be there is another solution to add SSL-checks on zabbix-server easily?

[SBO]

Hi,

It's a pure logical question.. If you deploy a template on several server, and that this template requires an external script, of course the script must be on every server you deploy the template to.

If you prefer to have the script on one single host, you can try to add it as a virtual host (ie. "Check-SSL-Server"), and add all your SSL certificates to check on it.

[dfisicaro]

SSL Check

sorry but i dont know what you mean, you must assign each host to this template and must also install this script to each host!

What do you mean install the script on each host? We just want to check the SSL Validity. So just that its valid, and how many days.

I run the command from my Zabbix Server with the script and syntax and they work fine.

I created a host as just the URL I want to check. We don't have the Zabbix agent installed on it or is that a requirement for it work?

Thanks,

Daniel

[dfisicaro]

SSL Check - update

I've created a different item under the Template SSL Check using the syntax of what I run from the command line and without the {$SNI} and now its showing the number of days the certificate is valid for.

Now I just need to assign the triggers to get it to notify which the original Item has assigned. Not sure if I can copy that.

Maybe i can edit the original item and see if it works instead of adding my own one.

I will give it a try.