crypt-expiry-check.1.in


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

.TH crypt-expiry-check 1 "" "crypt-expiry-check #VERSION#" ""
.SH NAME
crypt-expiry-check \- check expiry of gpg-keys and X.509 certificates
.SH SYNOPSIS
\fBcrypt-expiry-check [options]\fP
.SH DESCRIPTION
\fBcrypt-expiry-check\fP checks expiration of gpg keys and X.509 certificates and sends emails if keys are about to expire.
.SH OPTIONS
.TP
.B "\-a"
send a warning message through e-mail
.TP
.B "\-b"
will not print header
.TP
.B "\-c cert file"
print the expiration date for the PEM or PKCS12 formatted certificate in cert file
.TP
.B "\-e e\-mail address"
e-mail address to send expiration notices to
.TP
.B "\-f cert file"
file with a list of (FQDN;port)s, gpg keys and certificate files to check
.TP
.B "\-g e\-mail address"
e-mail address to check expiry of gpg-key of
.TP
.B "\-h"
print this screen
.TP
.B "\-i"
print the issuer of the certificate
.TP
.B "\-k password"
PKCS12 file password
.TP
.B "\-n"
run as a Nagios plugin
.TP
.B "\-s commmon_name:port"
server and port to connect to (interactive mode)
.TP
.B "\-t type"
specify the certificate type
.TP
.B "\-q"
don't print anything on the console
.TP
.B "\-v"
specify a specific protocol version to use (tls, ssl2, ssl3)
.TP
.B "\-V"
only print validation data
.TP
.B "\-x days"
certificate expiration interval (eg. if cert_date < days)
.SH FILES
.TP
.B "#BINDIR#/crypt-expiry-check"
program file
.TP
.B "#ETCDIR#/crypt-expiry.checks"
contains keys to surveil
.TP
.B "#CRONDIR#/crypt-expiry-check.cron"
cronfile to initiate daily checks
.SH CONTRIBUTION
Heavily based on \fBssl-cert-check\fP from \fBMatty < matty91 at gmail dot com >\fP.
The original source can be found here: \fBhttp://prefetch.net/code/ssl-cert-check\fP
.SH AUTHOR
.nf
Erich Eckner <opensource at eckner dot net>
.fi