Simple SSL certificate expiration check tools:
- crt-check: CLI check tool
- crt-mon: HTTP server that's check expiration and expose as Prometheus metrics
For crt-mon is also available ZABBIX template.
Download and extract release package from: https://github.com/xcdr/crt-mon/releases.
Run manual check and display failed entries or expires in 7 days:
/opt/bin/crt-check -file /opt/etc/crt-hosts.yml -days 7
Run manual check with enabled IPv6 support and display all entries:
/opt/bin/crt-check -file /opt/etc/crt-hosts.yml -6
Launch Prometheus exporter on port 2112:
/opt/bin/crt-mon -file /opt/etc/crt-hosts.yml -port 2112
- Install script