ubuntu@juju-a67f89-openstack-25:/etc/ssl/certs$ ls -l | grep openstack-service-checks
lrwxrwxrwx 1 root root     61 Feb 22 09:15 openstack-service-checks.pem -> /usr/local/share/ca-certificates/openstack-service-checks.crt
ubuntu@juju-a67f89-openstack-25:/etc/ssl/certs$ /usr/local/lib/nagios/plugins/check_ssl_cert -H 10.5.2.251 -p 9292 -u /healthcheck -c 14 -w 30 --ignore-sct --verbose
cannot find nmap: disabling connection checks and ciphers checks
Using a proxy: cannot test connection
The certificate for this site contains a Subject Alternative Name extension
Certificate element 1 (juju-a67f89-openstack-8.project.serverstack) is valid for 359 days
OCSP check for element 1 OK
Certificate element 2 (Vault Intermediate Certificate Authority (charm-pki-local)) is valid for 3644 days
Warning cannot find the CA Issuers in the certificate chain element 2: disabling OCSP checks on chain element 2
CRITICAL error: Cannot verify certificate: unable to get local issuer certificate
The certificate contains signed certificate timestamps (SCT)
The certificate validity (364) is shorter then the maximum (397)
SSL_CERT CRITICAL juju-a67f89-openstack-8.project.serverstack: Cannot verify certificate: unable to get local issuer certificate|days_chain_elem1=359;30;14;; days_chain_elem2=3644;30;14;;
ubuntu@juju-a67f89-openstack-25:/etc/ssl/certs$ sudo update-ca-certificates
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
ubuntu@juju-a67f89-openstack-25:/etc/ssl/certs$ /usr/local/lib/nagios/plugins/check_ssl_cert -H 10.5.2.251 -p 9292 -u /healthcheck -c 14 -w 30 --ignore-sct --verbose
cannot find nmap: disabling connection checks and ciphers checks
Using a proxy: cannot test connection
The certificate for this site contains a Subject Alternative Name extension
Certificate element 1 (juju-a67f89-openstack-8.project.serverstack) is valid for 359 days
OCSP check for element 1 OK
Certificate element 2 (Vault Intermediate Certificate Authority (charm-pki-local)) is valid for 3644 days
Warning cannot find the CA Issuers in the certificate chain element 2: disabling OCSP checks on chain element 2
CRITICAL error: Cannot verify certificate: unable to get local issuer certificate
The certificate contains signed certificate timestamps (SCT)
The certificate validity (364) is shorter then the maximum (397)
SSL_CERT CRITICAL juju-a67f89-openstack-8.project.serverstack: Cannot verify certificate: unable to get local issuer certificate|days_chain_elem1=359;30;14;; days_chain_elem2=3644;30;14;;
ubuntu@juju-a67f89-openstack-25:/etc/ssl/certs$ sudo update-ca-certificates --fresh
Clearing symlinks in /etc/ssl/certs...
done.
Updating certificates in /etc/ssl/certs...
rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL
125 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
ubuntu@juju-a67f89-openstack-25:/etc/ssl/certs$ ls -l | grep openstack-service-checks
lrwxrwxrwx 1 root root     28 Feb 22 09:21 8d2fba8c.0 -> openstack-service-checks.pem
lrwxrwxrwx 1 root root     61 Feb 22 09:21 openstack-service-checks.pem -> /usr/local/share/ca-certificates/openstack-service-checks.crt
ubuntu@juju-a67f89-openstack-25:/etc/ssl/certs$ /usr/local/lib/nagios/plugins/check_ssl_cert -H 10.5.2.251 -p 9292 -u /healthcheck -c 14 -w 30 --ignore-sct --verbose
cannot find nmap: disabling connection checks and ciphers checks
Using a proxy: cannot test connection
The certificate for this site contains a Subject Alternative Name extension
Certificate element 1 (juju-a67f89-openstack-8.project.serverstack) is valid for 359 days
OCSP check for element 1 OK
Certificate element 2 (Vault Intermediate Certificate Authority (charm-pki-local)) is valid for 3644 days
Warning cannot find the CA Issuers in the certificate chain element 2: disabling OCSP checks on chain element 2
The certificate was successfully verified
The certificate contains signed certificate timestamps (SCT)
The certificate validity (364) is shorter then the maximum (397)
SSL_CERT OK - 10.5.2.251:9292, https, x509 certificate 'juju-a67f89-openstack-8.project.serverstack' from 'Vault Intermediate Certificate Authority (charm-pki-local)' valid until Feb 17 06:38:02 2024 GMT (expires in 359 days)|days_chain_elem1=359;30;14;; days_chain_elem2=3644;30;14;;