This tool provides remote check for ssl certificate expiration date. It connects to hosts:port, retrieve the expiration date and show you if it's going to expire or if it's expired, regarding the alert parameter (how many days before to alert)
It is released under the GNU GPL (see copyright for more details).
- Requirements
You need to have perl installed with at least the following modules:
IO::Socket
Net::SSLeay
Getopt::Long
Date::Parse
You also need the following commands:
- openssl
- sendmail
(see the beginning of the script for command paths customization)
- Installation
Put sslexpire in your PATH (/usr/local/bin for example). The default location for the configuration file is /etc/sslexpire/sslexpire.conf.
You can install a manpage by running:
pod2man --section=1 /path/to/sslexpire | gzip -c > /usr/share/man/man1/sslexpire.1.gz
- Usage
Just run "sslexpire --help" to get command options and have a look at "/etc/sslexpire/sslexpire.conf" to understand config file options.
If you wan't to check automatically hosts specified in config file, put a line like this in your /etc/crontab:
# This will check all hosts in sslexpire config file evry day at 01h01 and send
# mail if the expiration date is going to be expired.
#
1 1 * * * nobody [ -x /usr/bin/sslexpire ] && sslexpire -m
I suggest that you run your cron as a non-privileged user like the nobody user used above (root isn't necessary so...).