DESCRIPTION

will be generated. You may view the +manual page with: nroff -man .

| less'. A +typical entry in a Makefile or Makefile.am is: + +DB2MAN=/usr/share/sgml/docbook/stylesheet/xsl/nwalsh/\ +manpages/docbook.xsl +XP=xsltproc -''-nonet + +manpage.1: manpage.dbk + $(XP) $(DB2MAN) $< + +The xsltproc binary is found in the xsltproc package. The +XSL files are in docbook-xsl. Please remember that if you +create the nroff version in one of the debian/rules file +targets (such as build), you will need to include xsltproc +and docbook-xsl in your Build-Depends control field. + +--> + + + FIRSTNAME"> + SURNAME"> + + Dezember 4, 2008"> + + SECTION"> + arnold@schlittermann.de"> + + NAGIOS-PLUGIN-CERT"> + + + Debian"> + GNU"> + GPL"> +]> + + + +

+ &dhemail; +

+ + &dhfirstname; + &dhsurname; + + + 2003 + &dhusername; + + &dhdate; + + + &dhucpackage; + + &dhsection; + + + &dhpackage; + + program to do something + + + + &dhpackage; + + + + + + + + DESCRIPTION + + This manual page documents briefly the + &dhpackage; and bar + commands. + + This manual page was written for the &debian; distribution + because the original program does not have a manual page. + Instead, it has documentation in the &gnu; + Info format; see below. + + &dhpackage; is a program that... + + + + OPTIONS + + These programs follow the usual &gnu; command line syntax, + with long options starting with two dashes (`-'). A summary of + options is included below. For a complete description, see the + Info files. + + + + + + + + Show summary of options. + + + + + + + + Show version of program. + + + + + + SEE ALSO + + bar (1), baz (1). + + The programs are documented fully by The Rise and + Fall of a Fooish Bar available via the + Info system. + + + AUTHOR + + This manual page was written by &dhusername; &dhemail; for + the &debian; system (but may be used by others). Permission is + granted to copy, distribute and/or modify this document under + the terms of the &gnu; General Public License, Version 2 any + later version published by the Free Software Foundation. + + + On Debian systems, the complete text of the GNU General Public + License can be found in /usr/share/common-licenses/GPL. + + + + + diff -r 66c2f2375514 -r 8c08150c2371 debian/menu.ex --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/menu.ex Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,2 @@ +?package(nagios-plugin-cert):needs="X11|text|vc|wm" section="Apps/see-menu-manual"\ + title="nagios-plugin-cert" command="/usr/bin/nagios-plugin-cert" diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert-default.ex --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/nagios-plugin-cert-default.ex Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,10 @@ +# Defaults for nagios-plugin-cert initscript +# sourced by /etc/init.d/nagios-plugin-cert +# installed at /etc/default/nagios-plugin-cert by the maintainer scripts + +# +# This is a POSIX shell fragment +# + +# Additional options that are passed to the Daemon. +DAEMON_OPTS="" diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert.doc-base.EX --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/nagios-plugin-cert.doc-base.EX Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,22 @@ +Document: nagios-plugin-cert +Title: Debian nagios-plugin-cert Manual +Author: +Abstract: This manual describes what nagios-plugin-cert is + and how it can be used to + manage online manuals on Debian systems. +Section: unknown + +Format: debiandoc-sgml +Files: /usr/share/doc/nagios-plugin-cert/nagios-plugin-cert.sgml.gz + +Format: postscript +Files: /usr/share/doc/nagios-plugin-cert/nagios-plugin-cert.ps.gz + +Format: text +Files: /usr/share/doc/nagios-plugin-cert/nagios-plugin-cert.text.gz + +Format: HTML +Index: /usr/share/doc/nagios-plugin-cert/html/index.html +Files: /usr/share/doc/nagios-plugin-cert/html/*.html + + diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert/DEBIAN/control --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/nagios-plugin-cert/DEBIAN/control Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,10 @@ +Package: nagios-plugin-cert +Version: 1.0-1 +Section: unknown +Priority: extra +Architecture: i386 +Depends: perl, libdate-manip-perl, openssl +Installed-Size: 68 +Maintainer: Christian Arnold +Description: nagios plugin to check openssl certificates + This plugin checks the expire date of x509 and pkcs12 certificates. diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert/DEBIAN/md5sums --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/nagios-plugin-cert/DEBIAN/md5sums Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,4 @@ +2a7a64ca94e12b1b7f672d3dc62fdd48 usr/share/doc/nagios-plugin-cert/copyright +61d6b2df68417be9f3a74e0a9bfc1bcb usr/share/doc/nagios-plugin-cert/changelog.Debian.gz +5bee9abf19f361eafbf96d0d117cfd2c usr/share/doc/nagios-plugin-cert/README.Debian +3b5d81661336c513cd4b0ded0dcdf36f usr/lib/nagios/plugins/ius/check_cert diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert/usr/lib/nagios/plugins/ius/check_cert --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/nagios-plugin-cert/usr/lib/nagios/plugins/ius/check_cert Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,180 @@ +#!/usr/bin/perl -w +# $Id$ +# $URL$ + +use strict; +use warnings; +use File::Basename; +use Getopt::Long; +use Date::Manip; +use IPC::Open2; +use lib "/usr/lib/nagios/plugins"; +use utils qw (%ERRORS &print_revision &support); + +sub print_help(); +sub print_usage(); + +my $ME = basename $0; +my ($opt_w, $opt_c, $opt_V, $opt_h, $opt_b, @opt_certfiles); +my ($w_time, $c_time, $result, $message, %certs); +my (@critical, @warning); + +$opt_w = "1month"; +$opt_c = "1week"; +$opt_b = "/usr/bin/openssl"; + +Getopt::Long::Configure('bundling'); +GetOptions( + "V" => \$opt_V, "version" => \$opt_V, + "h" => \$opt_h, "help" => \$opt_h, + "b=s" => \$opt_b, "binary" => \$opt_b, + "w=s" => \$opt_w, "warning=s" => \$opt_w, + "c=s" => \$opt_c, "critical=s" => \$opt_c, + "f=s" => \@opt_certfiles, "certfile=s" => \@opt_certfiles); + +if ($opt_V) { + print_revision($ME, "0.1"); + exit $ERRORS{"OK"}; +} + +if ($opt_h) { + print_help(); + exit $ERRORS{"OK"}; +} + +# check openssl binary +unless (-x $opt_b) { + print "CERT CRITICAL: OpenSSL not found or not executable - $opt_b\n"; + exit $ERRORS{"CRITICAL"}; +} + +unless(@opt_certfiles) { + print "CERT WARNING: Not defined any certificate files\n"; + exit $ERRORS{"WARNING"}; +} + +@opt_certfiles = split(/,/, join(',', @opt_certfiles)); + +# extract certificate data +foreach my $file (@opt_certfiles) { + unless (-r $file) { + print "CERT CRITICAL: $file - not exists or not read permission is granted\n"; + exit $ERRORS{"CRITICAL"}; + } + my @cmd_x509 = ($opt_b, "x509", "-in", $file, "-noout", "-subject", "-enddate"); + my @cmd_pkcs12 = ($opt_b, "pkcs12", "-in", $file, "-clcerts", "-nokeys", "-nomacver", "-passin", "pass:"); + my @cmd_pipe = ($opt_b, "x509", "-noout", "-subject", "-enddate"); + my ($temp, $cn, $enddate, $rc); + open(CERT, "-|") or do { + open(STDERR, ">&STDOUT"); + exec(@cmd_x509); + }; + + # check x509 certificates + while() { + /unable to load certificate/ and $rc = 1 and last; + /^subject=\s.*CN=(.*)\s+$/ and $cn = $1; + /^notAfter=(.*)\s+$/ and $enddate = $1; + } + close(CERT); + + # check pkcs12 certificates + if ($rc) { + open(PKCS12, "@cmd_pkcs12 |"); + + while() { + $temp .= $_; + } + close(PKCS12); + + local (*READ, *WRITE); + open2(\*READ, \*WRITE, @cmd_pipe) or die "Can't fork: $!\n"; + print WRITE $temp; + close(WRITE); + + while() { + /unable to load certificate/ and print "CERT CRITICAL: unable to load certificate\n" and exit $ERRORS{"CRITICAL"}; + /^subject=\s.*CN=(.*)\s+$/ and $cn = $1; + /^notAfter=(.*)\s+$/ and $enddate = $1; + } + close(READ); + } + # fill the hash + push ( @{$certs{$file}}, ($cn, $enddate) ); +} + +# calculate the time +$w_time = DateCalc("today", "+ $opt_w"); +$c_time = DateCalc("today", "+ $opt_c"); + +# check expire date +foreach (sort keys %certs) { + my $enddate; + if (@{$certs{$_}}[1] =~ /(\w+\s+\d+\s+\d+:\d+:\d+\s+\d+)/) { $enddate = $1; } + $enddate = ParseDate($enddate); + unless ($enddate) { + print "CERT CRITICAL: Can't parse enddate\n"; + exit $ERRORS{"CRITICAL"}; + } + + &Date_Cmp($enddate, $w_time) > 0 and push (@{$certs{$_}}, "OK"), next; + &Date_Cmp($enddate, $c_time) > 0 and push (@{$certs{$_}}, "WARNING"), next; + push (@{$certs{$_}}, "CRITICAL"); +} + +# looking for stats +foreach (sort keys %certs) { + if (@{$certs{$_}}[2] eq "WARNING") { + push (@warning, "file: $_, CN=@{$certs{$_}}[0] expires @{$certs{$_}}[1]"); + } elsif (@{$certs{$_}}[2] eq "CRITICAL") { + push (@critical, "file: $_, CN=@{$certs{$_}}[0] expires @{$certs{$_}}[1]"); + } +} + +# return the state +if (@critical) { + print "CERT CRITICAL: @critical\n"; + exit $ERRORS{"CRITICAL"}; +} elsif (@warning) { + print "CERT WARNING: @warning\n"; + exit $ERRORS{"WARNING"}; +} else { + print "CERT OK: all certificates in limit\n"; + exit $ERRORS{"OK"}; +} + +sub print_usage() { + print "Usage:\n"; + print " $ME [-b ] [-w ] [-c ] [-f ]\n"; + print " $ME [-h | --help]\n"; + print " $ME [-V | --version]\n"; +} + +sub print_help() { + print_revision($ME, "0.1"); + print "Copyright (c) 2008 Christian Arnold\n\n"; + print "This plugin checks the expire date for openssl certificates.\n\n"; + print_usage(); + print "\n"; + print " -b, --binary \n"; + print " Path of openssl binary (default: /usr/bin/openssl)\n"; + print " -w, --warning \n"; + print " Certificat should not be more than this time older (default: 1month)\n"; + print " For time can be used year, month, day, hour, minute, second and weeks.\n"; + print " -c, --critical \n"; + print " Certificat should not be more than this time older (default: 1week)\n"; + print " For time can be used year, month, day, hour, minute, second and weeks.\n"; + print " -f, --certfile \n"; + print " Absolute path of x509 or pkcs12 openssl certificate files, use comma-separated lists for multiple files.\n"; + print " -h, --help\n"; + print " Print detailed help screen\n"; + print " -V, --version\n"; + print " Print version information\n"; + print "\n"; + support(); +} + + +exit; + +# vim:sts=4 sw=4 aw ai sm: diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert/usr/share/doc/nagios-plugin-cert/README.Debian --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/nagios-plugin-cert/usr/share/doc/nagios-plugin-cert/README.Debian Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,6 @@ +nagios-plugin-cert for Debian +----------------------------- + + + + -- Christian Arnold Thu, 4 Dec 2008 14:28:26 +0100 diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert/usr/share/doc/nagios-plugin-cert/changelog.Debian.gz Binary file debian/nagios-plugin-cert/usr/share/doc/nagios-plugin-cert/changelog.Debian.gz has changed diff -r 66c2f2375514 -r 8c08150c2371 debian/nagios-plugin-cert/usr/share/doc/nagios-plugin-cert/copyright --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/nagios-plugin-cert/usr/share/doc/nagios-plugin-cert/copyright Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,35 @@ +This package was debianized by Christian Arnold on +Thu, 4 Dec 2008 14:28:26 +0100. + +It was downloaded from + +Upstream Author: + +Copyright: + +License: + + This package is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 2 of the License, or + (at your option) any later version. + + This package is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this package; if not, write to the Free Software + Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA + +On Debian systems, the complete text of the GNU General +Public License can be found in `/usr/share/common-licenses/GPL'. + +The Debian packaging is (C) 2008, Christian Arnold and +is licensed under the GPL, see above. + + +# Please also look if there are files or directories which have a +# different copyright/license attached and list them here. diff -r 66c2f2375514 -r 8c08150c2371 debian/postinst.ex --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/postinst.ex Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,41 @@ +#!/bin/sh +# postinst script for nagios-plugin-cert +# +# see: dh_installdeb(1) + +set -e + +# summary of how this script can be called: +# * `configure' +# * `abort-upgrade' +# * `abort-remove' `in-favour' +# +# * `abort-remove' +# * `abort-deconfigure' `in-favour' +# `removing' +# +# for details, see http://www.debian.org/doc/debian-policy/ or +# the debian-policy package + + +case "$1" in + configure) + ;; + + abort-upgrade|abort-remove|abort-deconfigure) + ;; + + *) + echo "postinst called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 + + diff -r 66c2f2375514 -r 8c08150c2371 debian/postrm.ex --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/postrm.ex Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,39 @@ +#!/bin/sh +# postrm script for nagios-plugin-cert +# +# see: dh_installdeb(1) + +set -e + +# summary of how this script can be called: +# * `remove' +# * `purge' +# * `upgrade' +# * `failed-upgrade' +# * `abort-install' +# * `abort-install' +# * `abort-upgrade' +# * `disappear' +# +# for details, see http://www.debian.org/doc/debian-policy/ or +# the debian-policy package + + +case "$1" in + purge|remove|upgrade|failed-upgrade|abort-install|abort-upgrade|disappear) + ;; + + *) + echo "postrm called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 + + diff -r 66c2f2375514 -r 8c08150c2371 debian/preinst.ex --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/preinst.ex Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,37 @@ +#!/bin/sh +# preinst script for nagios-plugin-cert +# +# see: dh_installdeb(1) + +set -e + +# summary of how this script can be called: +# * `install' +# * `install' +# * `upgrade' +# * `abort-upgrade' +# for details, see http://www.debian.org/doc/debian-policy/ or +# the debian-policy package + + +case "$1" in + install|upgrade) + ;; + + abort-upgrade) + ;; + + *) + echo "preinst called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 + + diff -r 66c2f2375514 -r 8c08150c2371 debian/prerm.ex --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/prerm.ex Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,40 @@ +#!/bin/sh +# prerm script for nagios-plugin-cert +# +# see: dh_installdeb(1) + +set -e + +# summary of how this script can be called: +# * `remove' +# * `upgrade' +# * `failed-upgrade' +# * `remove' `in-favour'

+# * `deconfigure' `in-favour' +# `removing' +# +# for details, see http://www.debian.org/doc/debian-policy/ or +# the debian-policy package + + +case "$1" in + remove|upgrade|deconfigure) + ;; + + failed-upgrade) + ;; + + *) + echo "prerm called with unknown argument \`$1'" >&2 + exit 1 + ;; +esac + +# dh_installdeb will replace this with shell code automatically +# generated by other debhelper scripts. + +#DEBHELPER# + +exit 0 + + diff -r 66c2f2375514 -r 8c08150c2371 debian/rules --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/rules Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,107 @@ +#!/usr/bin/make -f +# -*- makefile -*- +# Sample debian/rules that uses debhelper. +# This file was originally written by Joey Hess and Craig Small. +# As a special exception, when this file is copied by dh-make into a +# dh-make output file, you may use that output file without restriction. +# This special exception was added by Craig Small in version 0.37 of dh-make. + +# Uncomment this to turn on verbose mode. +#export DH_VERBOSE=1 + + +# These are used for cross-compiling and for saving the configure script +# from having to guess our platform (since we know it already) +DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) +DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) + + +CFLAGS = -Wall -g + +ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) + CFLAGS += -O0 +else + CFLAGS += -O2 +endif + +config.status: configure + dh_testdir + # Add here commands to configure the package. + ./configure --host=$(DEB_HOST_GNU_TYPE) --build=$(DEB_BUILD_GNU_TYPE) --prefix=/usr --mandir=\$${prefix}/share/man --infodir=\$${prefix}/share/info CFLAGS="$(CFLAGS)" LDFLAGS="-Wl,-z,defs" + + +build: build-stamp + +build-stamp: config.status + dh_testdir + + # Add here commands to compile the package. + $(MAKE) + #docbook-to-man debian/nagios-plugin-cert.sgml > nagios-plugin-cert.1 + + touch $@ + +clean: + dh_testdir + dh_testroot + rm -f build-stamp + + # Add here commands to clean up after the build process. + -$(MAKE) distclean +ifneq "$(wildcard /usr/share/misc/config.sub)" "" + cp -f /usr/share/misc/config.sub config.sub +endif +ifneq "$(wildcard /usr/share/misc/config.guess)" "" + cp -f /usr/share/misc/config.guess config.guess +endif + + + dh_clean + +install: build + dh_testdir + dh_testroot + dh_clean -k + dh_installdirs + + # Add here commands to install the package into debian/nagios-plugin-cert. + $(MAKE) prefix=$(CURDIR)/debian/nagios-plugin-cert/usr install + + +# Build architecture-independent files here. +binary-indep: build install +# We have nothing to do by default. + +# Build architecture-dependent files here. +binary-arch: build install + dh_testdir + dh_testroot + dh_installchangelogs + dh_installdocs + dh_installexamples +# dh_install +# dh_installmenu +# dh_installdebconf +# dh_installlogrotate +# dh_installemacsen +# dh_installpam +# dh_installmime +# dh_python +# dh_installinit +# dh_installcron +# dh_installinfo + dh_installman + dh_link + dh_strip + dh_compress + dh_fixperms +# dh_perl +# dh_makeshlibs + dh_installdeb + dh_shlibdeps + dh_gencontrol + dh_md5sums + dh_builddeb + +binary: binary-indep binary-arch +.PHONY: build clean binary-indep binary-arch binary install diff -r 66c2f2375514 -r 8c08150c2371 debian/watch.ex --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/debian/watch.ex Thu Dec 04 13:35:41 2008 +0000 @@ -0,0 +1,22 @@ +# Example watch control file for uscan +# Rename this file to "watch" and then you can run the "uscan" command +# to check for upstream updates and more. +# See uscan(1) for format + +# Compulsory line, this is a version 3 file +version=3 + +# Uncomment to examine a Webpage +# +#http://www.example.com/downloads.php nagios-plugin-cert-(.*)\.tar\.gz + +# Uncomment to examine a Webserver directory +#http://www.example.com/pub/nagios-plugin-cert-(.*)\.tar\.gz + +# Uncommment to examine a FTP server +#ftp://ftp.example.com/pub/nagios-plugin-cert-(.*)\.tar\.gz debian uupdate + +# Uncomment to find new files on sourceforge, for debscripts >= 2.9 +# http://sf.net/nagios-plugin-cert/nagios-plugin-cert-(.*)\.tar\.gz + +