sensu-plugins-sslcrt 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: b8764080400ba0d69c5ef71ba2184e0f169619a6
+  data.tar.gz: 488e9890bbe2661cf3b0b8ba13daa049a70a4f88
+SHA512:
+  metadata.gz: b7c0695f23ed9d800677aed734496911d799eb34e36bbe622de841c637df7ab74ae79e6d4ddf52e8ca663f3f940e225a48be8c30f40ff6aa68da8678e6b67c61
+  data.tar.gz: a8e86e9759e78766c9ae501e1e7fcb0e60a7f39ba785553d2ea10fee91d168a492aea7616924bf696a76cf19f9f081d571d944dc996c3acd34a7d35b79fafa40

data/CHANGELOG.md

@@ -0,0 +1,10 @@
+# Change Log
+This project adheres to [Semantic Versioning](http://semver.org/).
+
+This CHANGELOG follows the format listed at [Keep A Changelog](http://keepachangelog.com/)
+
+## Unreleased
+
+## [0.0.1] - 2016-01-13
+### Added
+- Initial release

data/LICENSE

@@ -0,0 +1,23 @@
+Copyright (c) 2015 Matteo Cerutti
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+

data/README.md

@@ -0,0 +1,18 @@
+# Sensu plugin for monitoring SSL certificates
+
+A sensu plugin to monitor the validity of SSL certificates
+
+## Usage
+
+The plugin accepts the following command line options:
+
+```
+Usage: check-sslcrt.rb (options)
+        --connect <HOST>[:<PORT>]    This specifies the host and optional port to connect to
+    -c, --crit <DAYS>                Critical if expiration date is DAYS away
+    -f, --file <CERT_FILE>           This specifies the input filename to read a certificate from
+    -w, --warn <DAYS>                Warn if expiration date is DAYS away
+```
+
+## Author
+Matteo Cerutti - <matteo.cerutti@hotmail.co.uk>

data/bin/check-sslcrt.rb

@@ -0,0 +1,67 @@
+#!/usr/bin/env ruby
+#
+# check-sslcrt.rb
+#
+# Author: Matteo Cerutti <matteo.cerutti@hotmail.co.uk>
+#
+
+require 'sensu-plugin/check/cli'
+require 'time'
+
+class CheckSslCrt < Sensu::Plugin::Check::CLI
+  option :connect,
+         :description => "This specifies the host and optional port to connect to",
+         :long => "--connect <HOST>[:<PORT>]",
+         :default => nil
+
+  option :file,
+         :description => "This specifies the input filename to read a certificate from",
+         :short => "-f <CERT_FILE>",
+         :long => "--file <CERT_FILE>",
+         :default => nil
+
+  option :warn,
+         :description => "Warn if expiration date is DAYS away",
+         :short => "-w <DAYS>",
+         :long => "--warn <DAYS>",
+         :proc => proc(&:to_i),
+         :default => 25
+
+  option :crit,
+         :description => "Critical if expiration date is DAYS away",
+         :short => "-c <DAYS>",
+         :long => "--crit <DAYS>",
+         :proc => proc(&:to_i),
+         :default => 10
+
+  def initialize()
+    super
+
+    raise "Must provide either --connect or --file command line options" if (config[:connect] and config[:file]) or (!config[:connect] and !config[:file])
+    raise "Critical threshold must be lower than the warning threshold" if config[:crit] >= config[:warn]
+  end
+
+  def expiration_date()
+    if config[:connect]
+      date = %x[openssl s_client -connect #{config[:connect]} 2>/dev/null </dev/null | openssl x509 -noout -dates]
+    else
+      date = %x[openssl x509 -enddate -noout -in #{config[:file]}]
+    end
+
+    Time.parse(date[/^notAfter=(.*)/, 1])
+  end
+
+  def run
+    days_left = ((expiration_date() - Time.now) / 86400).to_i
+
+    if config[:connect]
+      msg = "SSL certificate for host #{config[:connect]} will expire in #{days_left} days"
+    else
+      msg = "SSL certificate file '#{config[:file]}' will expire in #{days_left} days"
+    end
+
+    critical(msg + " (<= #{config[:crit]})") if days_left <= config[:crit]
+    warning(msg + " (<= #{config[:warn]})") if days_left <= config[:warn]
+    ok(msg + " (> #{config[:warn]})")
+  end
+end

data/lib/sensu-plugins-sslcrt.rb

@@ -0,0 +1 @@
+require 'sensu-plugins-sslcrt/version'

data/lib/sensu-plugins-sslcrt/version.rb

@@ -0,0 +1,9 @@
+module SensuPluginsSslCrt
+  module Version
+    MAJOR = 0
+    MINOR = 0
+    PATCH = 1
+
+    VER_STRING = [MAJOR, MINOR, PATCH].compact.join('.')
+  end
+end

metadata

@@ -0,0 +1,70 @@
+--- !ruby/object:Gem::Specification
+name: sensu-plugins-sslcrt
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Matteo Cerutti
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2016-01-14 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: sensu-plugin
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 1.2.0
+description: This plugin provides facilities for monitoring the validity of SSL certificates
+email: "<matteo.cerutti@hotmail.co.uk>"
+executables:
+- check-sslcrt.rb
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE
+- README.md
+- bin/check-sslcrt.rb
+- lib/sensu-plugins-sslcrt.rb
+- lib/sensu-plugins-sslcrt/version.rb
+homepage: https://github.com/m4ce/sensu-plugins-sslcrt
+licenses:
+- MIT
+metadata:
+  maintainer: "@m4ce"
+  development_status: active
+  production_status: stable
+  release_draft: 'false'
+  release_prerelease: 'false'
+post_install_message: You can use the embedded Ruby by setting EMBEDDED_RUBY=true
+  in /etc/default/sensu
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 1.9.3
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.4.5.1
+signing_key: 
+specification_version: 4
+summary: Sensu plugins for monitoring the validity of SSL certificates
+test_files: []