Werk #15516: check_cert: New active check for advanced certificate monitoring

Component Checks & agents
Title check_cert: New active check for advanced certificate monitoring
Date Apr 3, 2024
Level Prominent Change
Class New Feature
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
2.4.0b1 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0b4 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

The check_http plug-in was previously the only method to monitor certificates out-of-the-box with Checkmk. With the new plug-in Checkmk provides an extensive functionality to monitor certificates. This includes but is not limited to certificates provided by the HTTP protocol.

With the new plug-in you can monitor all certificates provided through a TCP connection to encrypt communication. This includes the monitoring of

  • validity times (max and remaining)
  • issuer fields
  • subject fields
  • encryption algorithm
  • alternative names
  • response times
  • public key algorithm and size
  • serial number

As with the reworked plugin to monitor web services, you are able to configure multiple services within a single rule.

To the list of all Werks