Skip to content

Certification

Certificate Monitor simulates an OpenSSL client connecting to a remote host and port to retrieve the certificate's expiration date. It then calculates the duration from the current time to determine if the certificate will expire within an expected timeframe. This monitor evaluates both the reachability of the host and the certificate's expiration date.

label: language:python,shell; os:alma8

Functionality List

  • Reachability: check connectivity between MCT server and remote server with port
  • Certificate Expiration: compare end date of certification with configurable expiration day threshold

Configuration

Zone Level

  • Zone Group: Plugin
  • Zone Type: CertificationMonitor

Server Level

  • Check Type: CertExpiration
  • SvrType: default value, deprecated
  • Instance Type: default value, deprecated
  • Pool Name: empty value, deprecated
  • Check IPAddress: the target IP address and port, e.g., google.com:443
  • Check Hostname: the target hostname
  • Retry Count: default value, optional
  • Retry Interval: default value, if configured Retry Count, the value is no fewer than 1 (seconds), optional
  • Expiration Threshold: expiration date threshold, if remaining valid days of certificate are fewer than the value, MCT would alert

Source code
More details could be found in CertExpiration