Home
Help
Search
Login
Register
OPNsense Forum
»
English Forums
»
Virtual private networks
»
How to monitor client certificates in opensense?
« previous
next »
Print
Pages: [
1
]
Author
Topic: How to monitor client certificates in opensense? (Read 793 times)
Roman199709
Newbie
Posts: 2
Karma: 0
How to monitor client certificates in opensense?
«
on:
February 13, 2024, 03:08:33 pm »
Please tell me how to monitor, for example, Zabbix the validity period of the client certificate ?
Logged
Patrick M. Hausen
Hero Member
Posts: 6722
Karma: 566
Re: How to monitor client certificates in opensense?
«
Reply #1 on:
February 13, 2024, 06:43:01 pm »
You need a Zabbix installation. Zabbix does not run on OPNsense. You need a dedicated Linux or FreeBSD server to run one of the common monitoring products like Zabbix, Nagios or Icinga - as I already explained to you.
Then you need to learn how to configure (via configuration files) these products so they will display the state of your certificates in their web UI.
The plugin options named e.g. Zabbix-agent are smaller pieces of software that you can run on OPNsense so a Zabbix server can monitor your OPNsense. They don't turn OPNsense into a monitoring system.
How many certificates do you have that you want to monitor?
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
Roman199709
Newbie
Posts: 2
Karma: 0
Re: How to monitor client certificates in opensense?
«
Reply #2 on:
February 14, 2024, 07:44:49 am »
Good day! Our company has a Zabbix server. It monitors opensense using the snmp protocol. But it doesn't track certificates by expiration date. I need to notify 10 days before the expiration date. The number of client certificates is about one hundred.
Logged
Patrick M. Hausen
Hero Member
Posts: 6722
Karma: 566
Re: How to monitor client certificates in opensense?
«
Reply #3 on:
February 14, 2024, 08:59:56 am »
Well, that is not really an OPNsense question, is it? You'd be much better assisted in the Zabbix forum, probably.
Google turned up this thread in seconds:
https://www.zabbix.com/forum/zabbix-help/16078-monitor-ssl-certificate-expiry
Logged
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do.
(Isaac Asimov)
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
English Forums
»
Virtual private networks
»
How to monitor client certificates in opensense?