-
Notifications
You must be signed in to change notification settings - Fork 120
Description
The check names for Linux are based on the file where the certificate is found. When the cert is replaced by moving a new cert file to the old location, the remaining lifetime is updated on the server and everything is fine (i.e. the check is always green):

On Windows the check name is based on the cert thumb, which changes when a certificate is renewed, e.g. by replacing it with a completly new one. This causes a warning for the discovery check:

I don't want to use the auto discovery feature of Checkmk here as certs must only vanish when a new cert with the same subject appears. AFAIK this condition isn't possible in auto discovery.
Maybe use something else for the check name, e.g. SSL Certificate <subject> <issuer>
. This way manual interaction is only required when the issuer or subject changes.