Zabbix SSL Certificate template (grading included)
This a guide on howto deploy and configure this template for SSL expiration check and grading SSL certificate deployment.
- Running HTTPS service (port)
- Certificate issuer
- Certificate expiration
- Certificate installation grade with SSL Labs API.
The following steps need to be performed on all zabbix servers (or proxy servers respectively).
yum install zabbix-sender
apt-get install zabbix-sender
Clone the repository
cd /tmp git clone https://github.com/hermanekt/Zabbix-ssl-certificate-check-with-grade.git
Copy scripts to their respective locations
cp /tmp/Zabbix-ssl-certificate-check-with-grade/ssllabs_checker.sh /usr/lib/zabbix/externalscripts cp /tmp/Zabbix-ssl-certificate-check-with-grade/ssllabs_checker_at.sh /usr/lib/zabbix/externalscripts cp /tmp/Zabbix-ssl-certificate-check-with-grade/zext_ssl_expiry.sh /usr/lib/zabbix/externalscripts cp /tmp/Zabbix-ssl-certificate-check-with-grade/zext_ssl_issuer.sh /usr/lib/zabbix/externalscripts
Set an execution bit
chmod +x zext_ssl_* chmod +x ssllabs_checker*
Install GO or copy over the pre-compiled package 'ssllabs-scan' (version v1.35.1)
Here you have 2 options - either to use the precompiled package I've provided, or you can build your own package from scratch.
1) Copy the package
cp /tmp/Zabbix-ssl-certificate-check-with-grade/ssllabs-scan /usr/lib/zabbix/externalscripts chmod +x /usr/lib/zabbix/externalscripts/ssllabs-scan
1) Install GOlang
yum install golang
apt-get install golang
2) Build sslabs-scan package
cd /tmp git clone https://github.com/ssllabs/ssllabs-scan/ cd ssllabs-scan/ go build mv /tmp/ssllabs-scan/ssllabs-scan /usr/lib/zabbix/externalscripts/ cd && rm -rf /tmp/ssllabs-scan/
Clean up the server
rm -rf /tmp/Zabbix-ssl-certificate-check-with-grade