Catch error when cert_expiration plugin is not able to connect to server
This commit is contained in:
parent
3c0e669596
commit
f10ae438e0
@ -1,6 +1,7 @@
|
||||
import ssl
|
||||
import OpenSSL
|
||||
from datetime import datetime,timedelta
|
||||
from socket import gaierror
|
||||
|
||||
def cert_expiration(args):
|
||||
hostname = args['endpoint'].split(":")[0]
|
||||
@ -10,15 +11,18 @@ def cert_expiration(args):
|
||||
except IndexError:
|
||||
port = 443
|
||||
|
||||
try:
|
||||
cert = ssl.get_server_certificate((hostname, port))
|
||||
except gaierror:
|
||||
return [False, "Failed to connect to server."]
|
||||
|
||||
x509 = OpenSSL.crypto.load_certificate(OpenSSL.crypto.FILETYPE_PEM, cert)
|
||||
expiration_date = datetime.strptime(f"{x509.get_notAfter().decode("UTF-8")[0:-1]}UTC", "%Y%m%d%H%M%S%Z")
|
||||
|
||||
status = "Success"
|
||||
if (expiration_date - timedelta(days = args['expiration_warning_days'])) < datetime.now():
|
||||
status = "Warning"
|
||||
status = False
|
||||
else:
|
||||
status = "Success"
|
||||
status = True
|
||||
|
||||
|
||||
return [status, f"Expiration: {expiration_date}"]
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user