We ran into this the other day as well -- certs were ok but intermediary expired
Afaics currently cert checks are done via
/usr/lib/nagios/plugins/check_http -C ...
Which works for endpoint certs but does not check the whole chain.
There's a sep. plugin check_ssl_cert(1) that might be worth exploring -- as it also checks intermediaries from ver 1.115.0 onward
https://github.com/matteocorti/check_ssl_cert https://github.com/matteocorti/check_ssl_cert/releases/tag/v1.115.0
We ran into this the other day as well -- certs were ok but intermediary expired
Afaics currently cert checks are done via
/usr/lib/ nagios/ plugins/ check_http -C ...
Which works for endpoint certs but does not check the whole chain.
There's a sep. plugin check_ssl_cert(1) that might be worth exploring -- as it also checks intermediaries from ver 1.115.0 onward
https:/ /github. com/matteocorti /check_ ssl_cert /github. com/matteocorti /check_ ssl_cert/ releases/ tag/v1. 115.0
https:/