smeserver-zabbix-agent/contribs7/smeserver-zabbix-agent-0.1-check_crt_expiration.patch

diff -Nur smeserver-zabbix-agent-0.1/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire smeserver-zabbix-agent-0.1_mod/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire
--- smeserver-zabbix-agent-0.1/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire     1970-01-01 01:00:00.000000000 +0100
+++ smeserver-zabbix-agent-0.1_mod/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire 2012-06-07 17:57:15.655057818 +0200
@@ -0,0 +1,13 @@
+# Certificate expiration
+
+# Description: Remaining days
+# Type: Agent or Agent (active)
+# Key: crt.expire[<port>]
+# Type of information: Numeric (integer 64bit)
+# Units: days
+# Use multiplier: No
+# Update interval: 86400
+# Store Value: As is
+# Show Value: As is
+
+UserParameter=crt.expire[*],/var/lib/zabbix/bin/cert_expire.pl -p $1
diff -Nur smeserver-zabbix-agent-0.1/root/var/lib/zabbix/bin/cert_expire.pl smeserver-zabbix-agent-0.1_mod/root/var/lib/zabbix/bin/cert_expire.pl
--- smeserver-zabbix-agent-0.1/root/var/lib/zabbix/bin/cert_expire.pl   1970-01-01 01:00:00.000000000 +0100
+++ smeserver-zabbix-agent-0.1_mod/root/var/lib/zabbix/bin/cert_expire.pl       2012-06-07 17:38:47.540200078 +0200
@@ -0,0 +1,142 @@
+#!/usr/bin/perl -w
+# Check peer certificate validity for Zabbix
+# Require perl module : IO::Socket, Net::SSLeay, Date::Parse
+# Require unix programs : openssl, echo, sendmail
+#
+# Based on sslexpire from Emmanuel Lacour <elacour@home-dn.net>
+#
+# This file is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by the
+# Free Software Foundation; either version 2, or (at your option) any
+# later version.
+#
+# This file is distributed in the hope that it will be
+# useful, but WITHOUT ANY WARRANTY; without even the implied warranty
+# of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this file; see the file COPYING.  If not, write to the Free
+# Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+# 02110-1301, USA.
+#
+
+
+use strict;
+use IO::Socket;
+use Net::SSLeay;
+use Getopt::Long;
+use Date::Parse;
+
+Net::SSLeay::SSLeay_add_ssl_algorithms();
+Net::SSLeay::randomize();
+
+# Default values
+my $opensslpath = "/usr/bin/openssl";
+
+my $host = '127.0.0.1';
+my $port = '443';
+
+my %opts;
+GetOptions (\%opts,
+    'host|h=s',
+    'port|p=s',
+    'help',
+);
+
+if ($opts{'host'}) {
+    $host = $opts{'host'};
+}
+if ($opts{'port'}){
+    $port = $opts{'port'};
+}
+
+if ($opts{'help'}) {
+    &usage;
+}
+
+# Print program usage
+sub usage {
+    print "Usage: sslexpire [OPTION]...
+-h, --host=HOST        check this host
+-p, --port=TCPPORT     check this port on the previous host
+    --help             print this help, then exit
+";
+    exit;
+}
+
+
+# This will return the expiration date
+sub getExpire {
+
+    my ($l_host,$l_port) = @_;
+    my ($l_expdate,$l_comment);
+
+    # Connect to $l_host:$l_port
+    my $socket = IO::Socket::INET->new(
+        Proto => "tcp",
+        PeerAddr => $l_host,
+        PeerPort => $l_port
+        );
+    # If we connected successfully
+    if ($socket) {
+        # Intiate ssl
+        my $l_ctx = Net::SSLeay::CTX_new();
+        my $l_ssl = Net::SSLeay::new($l_ctx);
+
+        Net::SSLeay::set_fd($l_ssl, fileno($socket));
+        my $res = Net::SSLeay::connect($l_ssl);
+
+        # Get peer certificate
+        my $l_x509 = Net::SSLeay::get_peer_certificate($l_ssl);
+        if ($l_x509) {
+            my $l_string = Net::SSLeay::PEM_get_string_X509($l_x509);
+            # Get the expiration date, using openssl
+           $l_expdate = `echo "$l_string" | $opensslpath x509 -enddate -noout 2>&1`;
+            $l_expdate =~ s/.*=//;
+            chomp($l_expdate);
+        }
+        else {
+            $l_expdate = 1;
+        }
+
+        # Close and cleanup
+        Net::SSLeay::free($l_ssl);
+        Net::SSLeay::CTX_free($l_ctx);
+        close $socket;
+    }
+    else {
+            $l_expdate = 1;
+    }
+    return $l_expdate;
+}
+
+
+# Print remaining days before expiration
+sub report {
+    # Convert date into epoch using date command
+    my ($l_expdate) = @_;
+    
+    if ($l_expdate ne "1") {
+        # The current date
+        my $l_today =  time;
+       my $l_epochdate = str2time($l_expdate);
+    
+        # Calculate diff between expiration date and today
+       my $l_diff = ($l_epochdate - $l_today)/(3600*24);
+
+        # Report if needed
+        printf "%.0f\n", $l_diff;
+    }
+    else {
+        print "Unable to read certificate!\n";
+        exit (1);
+    }
+}
+
+# Get expiration date
+my $expdate = getExpire($host,$port);
+   
+# Report
+report("$expdate");
+
1	vip-ire	1.1	diff -Nur smeserver-zabbix-agent-0.1/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire smeserver-zabbix-agent-0.1_mod/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire
2			--- smeserver-zabbix-agent-0.1/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire 1970-01-01 01:00:00.000000000 +0100
3			+++ smeserver-zabbix-agent-0.1_mod/root/etc/e-smith/templates/etc/zabbix/zabbix_agentd.conf/90UserParameters_certExpire 2012-06-07 17:57:15.655057818 +0200
4			@@ -0,0 +1,13 @@
5			+# Certificate expiration
6			+
7			+# Description: Remaining days
8			+# Type: Agent or Agent (active)
9			+# Key: crt.expire[<port>]
10			+# Type of information: Numeric (integer 64bit)
11			+# Units: days
12			+# Use multiplier: No
13			+# Update interval: 86400
14			+# Store Value: As is
15			+# Show Value: As is
16			+
17			+UserParameter=crt.expire[*],/var/lib/zabbix/bin/cert_expire.pl -p $1
18			diff -Nur smeserver-zabbix-agent-0.1/root/var/lib/zabbix/bin/cert_expire.pl smeserver-zabbix-agent-0.1_mod/root/var/lib/zabbix/bin/cert_expire.pl
19			--- smeserver-zabbix-agent-0.1/root/var/lib/zabbix/bin/cert_expire.pl 1970-01-01 01:00:00.000000000 +0100
20			+++ smeserver-zabbix-agent-0.1_mod/root/var/lib/zabbix/bin/cert_expire.pl 2012-06-07 17:38:47.540200078 +0200
21			@@ -0,0 +1,142 @@
22			+#!/usr/bin/perl -w
23			+# Check peer certificate validity for Zabbix
24			+# Require perl module : IO::Socket, Net::SSLeay, Date::Parse
25			+# Require unix programs : openssl, echo, sendmail
26			+#
27			+# Based on sslexpire from Emmanuel Lacour <elacour@home-dn.net>
28			+#
29			+# This file is free software; you can redistribute it and/or modify it
30			+# under the terms of the GNU General Public License as published by the
31			+# Free Software Foundation; either version 2, or (at your option) any
32			+# later version.
33			+#
34			+# This file is distributed in the hope that it will be
35			+# useful, but WITHOUT ANY WARRANTY; without even the implied warranty
36			+# of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
37			+# General Public License for more details.
38			+#
39			+# You should have received a copy of the GNU General Public License
40			+# along with this file; see the file COPYING. If not, write to the Free
41			+# Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
42			+# 02110-1301, USA.
43			+#
44			+
45			+
46			+use strict;
47			+use IO::Socket;
48			+use Net::SSLeay;
49			+use Getopt::Long;
50			+use Date::Parse;
51			+
52			+Net::SSLeay::SSLeay_add_ssl_algorithms();
53			+Net::SSLeay::randomize();
54			+
55			+# Default values
56			+my $opensslpath = "/usr/bin/openssl";
57			+
58			+my $host = '127.0.0.1';
59			+my $port = '443';
60			+
61			+my %opts;
62			+GetOptions (\%opts,
63			+ 'host\|h=s',
64			+ 'port\|p=s',
65			+ 'help',
66			+);
67			+
68			+if ($opts{'host'}) {
69			+ $host = $opts{'host'};
70			+}
71			+if ($opts{'port'}){
72			+ $port = $opts{'port'};
73			+}
74			+
75			+if ($opts{'help'}) {
76			+ &usage;
77			+}
78			+
79			+# Print program usage
80			+sub usage {
81			+ print "Usage: sslexpire [OPTION]...
82			+-h, --host=HOST check this host
83			+-p, --port=TCPPORT check this port on the previous host
84			+ --help print this help, then exit
85			+";
86			+ exit;
87			+}
88			+
89			+
90			+# This will return the expiration date
91			+sub getExpire {
92			+
93			+ my ($l_host,$l_port) = @_;
94			+ my ($l_expdate,$l_comment);
95			+
96			+ # Connect to $l_host:$l_port
97			+ my $socket = IO::Socket::INET->new(
98			+ Proto => "tcp",
99			+ PeerAddr => $l_host,
100			+ PeerPort => $l_port
101			+ );
102			+ # If we connected successfully
103			+ if ($socket) {
104			+ # Intiate ssl
105			+ my $l_ctx = Net::SSLeay::CTX_new();
106			+ my $l_ssl = Net::SSLeay::new($l_ctx);
107			+
108			+ Net::SSLeay::set_fd($l_ssl, fileno($socket));
109			+ my $res = Net::SSLeay::connect($l_ssl);
110			+
111			+ # Get peer certificate
112			+ my $l_x509 = Net::SSLeay::get_peer_certificate($l_ssl);
113			+ if ($l_x509) {
114			+ my $l_string = Net::SSLeay::PEM_get_string_X509($l_x509);
115			+ # Get the expiration date, using openssl
116			+ $l_expdate = `echo "$l_string" \| $opensslpath x509 -enddate -noout 2>&1`;
117			+ $l_expdate =~ s/.*=//;
118			+ chomp($l_expdate);
119			+ }
120			+ else {
121			+ $l_expdate = 1;
122			+ }
123			+
124			+ # Close and cleanup
125			+ Net::SSLeay::free($l_ssl);
126			+ Net::SSLeay::CTX_free($l_ctx);
127			+ close $socket;
128			+ }
129			+ else {
130			+ $l_expdate = 1;
131			+ }
132			+ return $l_expdate;
133			+}
134			+
135			+
136			+# Print remaining days before expiration
137			+sub report {
138			+ # Convert date into epoch using date command
139			+ my ($l_expdate) = @_;
140			+
141			+ if ($l_expdate ne "1") {
142			+ # The current date
143			+ my $l_today = time;
144			+ my $l_epochdate = str2time($l_expdate);
145			+
146			+ # Calculate diff between expiration date and today
147			+ my $l_diff = ($l_epochdate - $l_today)/(3600*24);
148			+
149			+ # Report if needed
150			+ printf "%.0f\n", $l_diff;
151			+ }
152			+ else {
153			+ print "Unable to read certificate!\n";
154			+ exit (1);
155			+ }
156			+}
157			+
158			+# Get expiration date
159			+my $expdate = getExpire($host,$port);
160			+
161			+# Report
162			+report("$expdate");
163			+