a-schild / Zabbix Ssl
Licence: gpl-2.0
Zabbix check SSL certificates
Projects that are alternatives of or similar to Zabbix Ssl
Laravel Uptime MonitorA powerful and easy to configure uptime and ssl monitor
Stars: ✭ 837 (+1760%)
Mutual labels: ssl
Docker MailserverProduction-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container.
Stars: ✭ 8,115 (+17933.33%)
Mutual labels: ssl
Haproxy ConfdHAProxy combined with confd for HTTP load balancing with SSL offloading
Stars: ✭ 7 (-84.44%)
Mutual labels: ssl
Sortpem➿ Sorting utility for PEM files
Stars: ✭ 11 (-75.56%)
Mutual labels: ssl
GensioA library to abstract stream I/O like serial port, TCP, telnet, UDP, SSL, IPMI SOL, etc.
Stars: ✭ 30 (-33.33%)
Mutual labels: ssl
Mruby Tlsmruby wrapper for libtls from http://www.libressl.org/
Stars: ✭ 5 (-88.89%)
Mutual labels: ssl
NicoA HTTP2 web server for reverse proxy and single page application, automatically apply for ssl certificate, Zero-Configuration.
Stars: ✭ 43 (-4.44%)
Mutual labels: ssl
ShgfSimple HTTP golang framework
Stars: ✭ 13 (-71.11%)
Mutual labels: ssl
Ssl grpc exampleExample using SSL with gRPC in Python
Stars: ✭ 36 (-20%)
Mutual labels: ssl
BigqMessaging platform in C# for TCP and Websockets, with or without SSL
Stars: ✭ 18 (-60%)
Mutual labels: ssl
Cve 2016 8610 PocCVE-2016-8610 (SSL Death Alert) PoC
Stars: ✭ 26 (-42.22%)
Mutual labels: ssl
GreenlockAutomatic SSL renewal for NodeJS
Stars: ✭ 30 (-33.33%)
Mutual labels: ssl
Zltoolkit一个基于C++11的轻量级网络框架,基于线程池技术可以实现大并发网络IO
Stars: ✭ 838 (+1762.22%)
Mutual labels: ssl
Bugsite IndexIndex of websites publishing bugs along the lines of heartbleed.com
Stars: ✭ 38 (-15.56%)
Mutual labels: ssl
Single File Httpd.confSingle file httpd.conf configuration file for Apache HTTPD Server.
Stars: ✭ 7 (-84.44%)
Mutual labels: ssl
GocertcenterCertCenter API Go Implementation
Stars: ✭ 21 (-53.33%)
Mutual labels: ssl
HttpsSecure HTTP client with SSL pinning for Nativescript - iOS/Android
Stars: ✭ 45 (+0%)
Mutual labels: ssl
FurionSocks5 + SSL Proxy
Stars: ✭ 39 (-13.33%)
Mutual labels: ssl
KituraA Swift web framework and HTTP server.
Stars: ✭ 7,533 (+16640%)
Mutual labels: ssl
zabbix-ssl
Zabbix check SSL certificates
We have to different ways to check for ssl certificates
- If you have only one certificate per IP address, use the standard
templates along with the ssltls.check script
- If you use multiple SSL certificates per IP address, then you
need to use the ssltls-sni.check and Template_App_HTTPS_Autodiscovery.xml
This script and the templates allow your zabbix server
to validate SSL certificates.
It supports direct SSL/HTTPS checks as well as STARTTLS connections
Supported check types
- simple Checks if SSL is active
- startdate Startdate of certificate
- enddate Enddate of certificate
- lifetime How long the certificate is valid
- ssl3 SSLv3 active ? (Poodle vulnerable) DISABLED per default
This only works when your openssl binaries still have built in ssl3 support
- digestmode Hash algorithm (For example detect SHA1 certificates)
How to install
-
Download the ssltls.check file to your Zabbix Server
external script directory (Or your proxy if the servers are behind a Zabbix proxy)
For example ExternalScripts=/usr/lib/zabbix/externalscripts
-
If your distribution uses the busybox timeout command, then you have to specify the -t parameter
in both script files (Change it to timeout_bin="/usr/bin/timeout -t "
)
-
Make it executable
-
Import the templates for the different check types in your zabbix server
-
Assign the templates to the hosts you wish to monitor
Additional setup required for SNI
Only needed if you have multiple certificates on the same IP+Port
- Put the /etc/zabbix/zabbix_agentd.d/ssl-sites.conf in the config directory
of your client agent (The server where your sites reside)
- Put the /etc/zabbix/ssl_sites.json in the config directory
of your client agent (The server where your sites reside)
and modify the list of sites which should be checked.
This is the list of certificates to check on this server
Make sure it has a valid json syntax
- Restart the zabbix agent
(C) 2018 André Schild <a.schild aarboard.ch>
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at
[email protected].