Data

Tools

Indexes

Applications

Experiments

Open Source Science

Recent Releases of check_ssl_cert

check_ssl_cert - check_ssl_cert-2.94.0

Added an option (--assume-online) to skip the open port check with nmap

- Shell
Published by matteocorti 10 months ago

check_ssl_cert - check_ssl_cert-2.93.0

No error when checking an expired certificate in a file with --ignore-exp

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.92.0

Prefers ip to ifconfig

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.91.0

Checks for curl when checking for HTTP headers

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.90.0

  • Fixes an issue with CRL checks
  • Checks alternative names when checking a file

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.89.0

Fixes a bug with certificated generated by oVirt

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.88.0

CRL check is enabled by default

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.87.1

Fixed a syntax error in the Icinga configuration

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.87.0

Added an option to ignore DH keys which are too small

- Shell
Published by matteocorti about 1 year ago

check_ssl_cert - check_ssl_cert-2.86.1

Fixed a problem with the DNSSEC check with IPv6 on Ubuntu

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.86.0

Added a command line option that generates a critical if TLS 1.2 is offered (--require-no-tls1_2)

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.85.1

Allows an empty argument to the --dane option

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.84.5

Fixed a in the command line options validation for --url and --user-agent

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.84.4

Fixed the command line options checks on openSUSE

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.84.3

Options specified in a configuration file can be overridden again

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.84.2

Minor bug fix removing spurious debugging output

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.84.1

Bug fixes in the handling of command line options

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.83.1

Fixes the output of missing arguments on Nagios

- Shell
Published by matteocorti over 1 year ago

check_ssl_cert - check_ssl_cert-2.83.0

Shows --info event in case of a problem

- Shell
Published by matteocorti almost 2 years ago

check_ssl_cert - check_ssl_cert-2.82.0

Fetch HTTP headers for --debug-headers even if no header check is enabled

- Shell
Published by matteocorti almost 2 years ago

check_ssl_cert - check_ssl_cert-2.81.1

Fix in the Icinga2 configuration file

- Shell
Published by matteocorti about 2 years ago

check_ssl_cert - check_ssl_cert-2.81.0

  • Support for SNI with nmap
  • Added the --fingerprint-alg option to specify which algorithm to be used with --fingerprint.

- Shell
Published by matteocorti about 2 years ago

check_ssl_cert - check_ssl_cert-2.80.0

Add support to ignore unclean TLS shutdowns

- Shell
Published by matteocorti about 2 years ago

check_ssl_cert - check_ssl_cert-2.79.0

SIPS support

- Shell
Published by matteocorti over 2 years ago

check_ssl_cert - check_ssl_cert-2.78.0

  • QUIC support
  • OpenSSL 3.2.0 support

- Shell
Published by matteocorti over 2 years ago

check_ssl_cert - check_ssl_cert-2.77.0

Added support for MQTTS

- Shell
Published by matteocorti over 2 years ago

check_ssl_cert - check_ssl_cert-2.76.0

--info output at the end

- Shell
Published by matteocorti over 2 years ago

check_ssl_cert - check_ssl_cert-2.75.0

Fixed an issue with the timeout

- Shell
Published by matteocorti over 2 years ago

check_ssl_cert - check_ssl_cert-2.74.0

Fixed an issue in the /etc/hosts parsing

- Shell
Published by matteocorti over 2 years ago

check_ssl_cert - check_ssl_cert-2.73.0

Fixed OCSP checks with proxy and OpenSSL 1.X

- Shell
Published by matteocorti almost 3 years ago

check_ssl_cert - check_ssl_cert-2.72.0

Fixed a bug in the proxy command line options validation

- Shell
Published by matteocorti almost 3 years ago

check_ssl_cert - check_ssl_cert-2.71.0

Fixed a bug if the host cannot be resolved and --resolve is specified

- Shell
Published by matteocorti almost 3 years ago

check_ssl_cert - check_ssl_cert-2.70.0

  • Added an option to skip the test to see if the host can be resolved
  • Added an option to resolve an host using DNS over HTTP
  • Added the Icigna2 configuration file

- Shell
Published by matteocorti almost 3 years ago

check_ssl_cert - check_ssl_cert-2.69.0

  • Added an option to skip the test to see if the host can be resolved
  • Added an option to resolve an host using DNS over HTTP

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.68.0

  • Fixes the protocol used by nmap if the host is resolved with /etc/hosts
  • Do not convert a CRL if already in the correct format
  • Removed a PCRE grep expression (non-standard)

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.67.0

Considers /etc/hosts for the existence checks

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.66.0

Fixed a problem with decimal critical or warning values and expired certificates

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.65.0

Fixed CRL output format parsing

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.64.0

Fixed the resolution of hosts with IPv6 addresses only

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.63.0

  • Command line option to ignore SSL Labs errors (-ignore-ssl-labs-errors)
  • Better checks for non-resolvable hosts

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.62.0

Fixed the output in case of timeout Fixed the ciphers with --rsa

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.61.0

Fixed the algorithms used by --rsa

- Shell
Published by matteocorti about 3 years ago

check_ssl_cert - check_ssl_cert-2.60.0

Release notes

Hot fix for version 2.59 (bug fix for --ignore-host-name)

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.59.0

Release notes

Fixes --ignore-host-cn behaviour with --match

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.58.0

Release notes

  • Added the option --security-level
  • Added an option to ignore header problems with --all and --all-local (--ignore-http-headers)

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.57.0

Release notes

Support for DNS over TLS

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.56.0

Release notes

New command line optioon --path

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.55.0

  • Java KeyStore checks (thanks to claudioth)
  • Bug fixes in the TDS checks

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.54.0

  • Java KeyStore checks (thanks to claudioth)
  • Bug fixes in the TDS checks

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.53.0

  • Implemented a check for MS SQL (Tabular Data Stream, TDS)
  • Fixed a bug in the date computations with Perl

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.52.0

Removed spurious debugging output

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.51.0

Fixed a bug in the chain checks

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.50.0

Additional checks for the certificate chain (see --check-chain)

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.49.0

  • The plugin is working without nmap (with some limitations)
  • Fixed a bug in the processing of the --nmap-bin option

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.48.0

Fixes the parsing of --require-no-http-header

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.47.0

  • New options to check HTTP headers (see --help)
  • Options can now be specified in a configuration file (see README.md)
  • Fixed a bug in the total certificate validity check if --precision is specified

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.46.0

The maximum validity check is performed only for HTTPS, files or if the --maximum-validity option is specified.

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.45.0

Checks the maximum certificate validity (397)

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.44.0

  • Fixed a problem with grep 3.8
  • Added --grep-bin to specify the grep binary to be used
  • Added --debug-headers to store the HTTP headers in the headers.txt file

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.43.0

  • Rewrote the HTTP security header checks (see documentation)
  • Fixed a bug when parsing certificates without purpose

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.42.0

  • Disable checks with nmap if a proxy is specified
  • Added --require-x-frame-options to check for the X-Frame-Options header

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.41.0

  • Fixed the parsing of UTF-8 certificate subjects
  • Better OpenSSL error handling
  • Fixed the HSTS check

- Shell
Published by matteocorti over 3 years ago

check_ssl_cert - check_ssl_cert-2.40.0

Fixed the parsing of the signature algorithm

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.38.0

Fixed the handling of --ignore-connection-problems

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.37.0

New option --require--hsts to check for HTTP Strict Transport Security

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.36.0

New option --user-agent to specify the user agent used by curl and by OpenSSL for HTTPS connections

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.35.0

  • Better error handling
  • Better handling of IPv6 addresses

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.34.0

If x509 -ext is not supported no info on the certificate purpose is extracted

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.33.0

Added DNSSEC checks

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.32.0

Added checks for the certificate purpose

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.31.0

Fixed a problem with Prometheus output

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.30.0

Fixed a bug in the prometheus output

- Shell
Published by matteocorti almost 4 years ago

check_ssl_cert - check_ssl_cert-2.29.0

  • Support for DTLS
  • Default ports for XMPP

- Shell
Published by matteocorti about 4 years ago

check_ssl_cert - check_ssl_cert-2.27.0

  • Fixed a bug with the ciphers check with older nmap versions

- Shell
Published by matteocorti about 4 years ago

check_ssl_cert - check_ssl_cert-2.26.0

  • Fixed a bug with the ciphers check with older nmap versions
  • Fixed a bug in the display of the expiration date

- Shell
Published by matteocorti about 4 years ago

check_ssl_cert - check_ssl_cert-2.25.0

Caching of the host names to be used with bash completion

- Shell
Published by matteocorti about 4 years ago

check_ssl_cert - check_ssl_cert-2.24.0

Fixes a problem with timeouts and SSL Labs

- Shell
Published by matteocorti about 4 years ago

check_ssl_cert - check_ssl_cert-2.23.0

  • An Unknown status is only returned for plugin-internal issues
  • Fixes a bug when the specified --match is an IP address

- Shell
Published by matteocorti about 4 years ago

check_ssl_cert - check_ssl_cert-2.22.0

  • The protocol is shown in the output
  • Processes files with .pkcs12 extension
  • Display all the unmatched common names

- Shell
Published by matteocorti about 4 years ago

check_ssl_cert - check_ssl_cert-2.21.0

  • New option: --quiet
  • The checked host and port are displayed in the output
  • Better documnentation of the --format option
  • bash-completion now autocompletes hosts

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.20.0

  • adding the reason of the timeout to the error message
  • bash completion

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.19.0

  • --file now accepts URIs (e.g., http://, https://, ftp://, file://, ...)
  • Added input validation for integers and floats

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.18.0

Use the same numnber format for the perfomance data as the given critical or warning values (e.g., rational numbers)

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.17.0

  • Fixed several issues when specifying a numeric IPv6 address
  • Checking the whole chain with STARTTLS

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.16.0

  • Remove the trailing . from FQDNs
  • Fixed a problem with self signed certificates

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.15.0

  • Error if HTTP/2 is requested but not offered by the server
  • SSL 2.0 and SSL 3.0 disabled by --all and --all-local

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.14.0

  • Added an option --info to print certificate information
  • Fixed a bug causing an unnecessary scan when checking for disallowed protocols
  • Fixed the IPv6 checks when ipconfig is not available

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.13.0

  • Fixed a bug in the processing of error messages
  • Handling of root certificates in DER format
  • Fixed the nmap cipher check for hosts which are not discoverable

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.12.0

Improved verbose messages

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.11.0

  • Works with OpenSSL 3.0.0
  • Fixes a bug in the processing of certificate issuers containing commas

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.10.4

Fixes the organisation check

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.10.3

  • Fixes --rsa on systems not supporting PSS
  • Uses mktemp if available (the workaround is only used if not available for speed reasons)

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.10.2

Improved the certificate chain check of local bundles

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.10.1

Fixed the certificate chain check

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.10.0

  • Checks the certificate chain integrity
  • Does not accept certificates without SANs (use --allow-empty-san to ignore)
  • Bug fix in the handling of errors while fetching certificates
  • Allows a check on invalid FQDNs containing an underscore

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.9.1

  • Accepts certificates without subject alternative names
  • Added an option (--debug-time) to print the elapsed time in the debugging output

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.9.0

The --skip-element option can now be specified multiple times and specifies to skip a single element of the certificate chain

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.8.0

  • Adds a check for acceptable client certificate CAs ((--require-client-cert [list]))
  • Supporting certificate expiration after 2038-01-19 on 32 bit systems
  • Adds an option (--ignore-connection-problem) to set a custom state in case of connection failures
  • Adds two options to selectively disable proxy setting for cURL and sclient (--no-proxy-curl and ```--no-proxy-sclient```)

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.7.0

Critical and warning can now be floating point numbers

- Shell
Published by matteocorti over 4 years ago

check_ssl_cert - check_ssl_cert-2.6.1

  • Fixed the output of several messages
  • Fixed the order of the critical messages
  • Fixed a problem when checking a local CRL (no STC checks and automatic conversion from DER format)
  • Fixed a problem with the tests with IPv6
  • Fixed a problem when checking a local certificate (does not try to connect to localhost to check for renegotiation)

- Shell
Published by matteocorti over 4 years ago