Zabbix SSL Certificate template
This is template and howto for SSL expiration check and grading SSL certificate deployment. Template pro kontrolu expirace, provozu a externi hodnoceni nasazeni
Monitoring:
- Running HTTPS service (port)
- Certificate issuer
- Certificate expiration
- Certificate installation grade with SSL Labs API.
Latest data
Items
Triggers
Macros
Install instruction
All operations is needed to do at zabbix or proxy servers. Nasledujci kroky musi byt provedeney na zabbix pripadne proxy serverch.
CentOS,RHEL
yum install zabbix-sender
Debian, Ubuntu
apt-get install zabbix-sender
Clone repository
cd /tmp
git clone git@github.com:hermanekt/Zabbix-ssl-certificate-check-with-grade.git
Copy scripts
cp /tmp/Zabbix-ssl-certificate-check-with-grade/ssllabs_checker.sh /usr/lib/zabbix/externalscripts
cp /tmp/Zabbix-ssl-certificate-check-with-grade/ssllabs_checker_at.sh /usr/lib/zabbix/externalscripts
cp /tmp/Zabbix-ssl-certificate-check-with-grade/zext_ssl_expiry.sh /usr/lib/zabbix/externalscripts
cp /tmp/Zabbix-ssl-certificate-check-with-grade/zext_ssl_issuer.sh /usr/lib/zabbix/externalscripts
Enable executing
chmod +x zext_ssl_*
chmod +x ssllabs_checker*
Zde mate 2 moznosti bud pouzit uz zbuildeny balicek a nebo si pripadne zbuildit svuj vlastni.
Install GO or copy my compiled package ssllabs-scan (version v1.35.1)
1) Copy
cp /tmp/Zabbix-ssl-certificate-check-with-grade/ssllabs-scan /usr/lib/zabbix/externalscripts
chmod +x /usr/lib/zabbix/externalscripts/ssllabs-scan
OR
1) Install GOlang CentOS,RHEL
yum install golang
Debian, Ubuntu
apt-get install golang
2) Build sslabs-scan package
cd /tmp
git clone https://github.com/ssllabs/ssllabs-scan/
cd ssllabs-scan/
go build
mv /tmp/ssllabs-scan/ssllabs-scan /usr/lib/zabbix/externalscripts/
cd && rm -rf /tmp/ssllabs-scan/
Clean server
rm -rf /tmp/Zabbix-ssl-certificate-check-with-grade
Import template in zabbix frontend
File: Template_SSL_Certificates.xml
Create dummy host and set template
Jako hostname je pouzita url adressa bez https Dummy host with hostname is URL name for example https://www.google.com/ hostname is: www.google.com
Host connection:
Host template:
