Werk #15516: check_cert: New active check for advanced certificate monitoring

Component

Checks & agents

Title

check_cert: New active check for advanced certificate monitoring

Date

Apr 3, 2024

Level

Prominent Change

Class

New Feature

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.4.0b1 Not yet released	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0b4	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

The check_http plug-in was previously the only method to monitor certificates out-of-the-box with Checkmk. With the new plug-in Checkmk provides an extensive functionality to monitor certificates. This includes but is not limited to certificates provided by the HTTP protocol.

With the new plug-in you can monitor all certificates provided through a TCP connection to encrypt communication. This includes the monitoring of

validity times (max and remaining)
issuer fields
subject fields
encryption algorithm
alternative names
response times
public key algorithm and size
serial number

As with the reworked plugin to monitor web services, you are able to configure multiple services within a single rule.

To the list of all Werks