[Nagiosplug-devel] [ nagiosplug-Bugs-1864404 ] check_smtp/check_http miscalculate timezones in cert expiry

[SourceForge.net]

Bugs item #1864404, was opened at 2008-01-05 09:46
Message generated for change (Settings changed) made by tonvoon
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=397597&aid=1864404&group_id=29880

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: General plugin execution
Group: Release (specify)
Status: Open
Resolution: None
Priority: 7
Private: No
Submitted By: David Miller (justdave72)
Assigned to: Nobody/Anonymous (nobody)
>Summary: check_smtp/check_http miscalculate timezones in cert expiry

Initial Comment:
check_smtp (nagios-plugins 1.4.9) 1.59

When running check_smtp with --starttls or -S, the certificate expiration time retrieved from the certificate is always expressed in GMT, but check_smtp compares it to the local timezone instead of GMT.  For example, I'm in -0800 and my certificate expired a couple hours ago, but check_smtp claims "WARNING - Certificate expires today (01/05/2008 05:40)." instead of a CRITICAL that it's already expired.  Time on the server is Sat Jan  5 01:44:42 PST 2008 (which is 09:44 GMT, past the expiration time)

openssl s_client tells me:
    Verify return code: 10 (certificate has expired)


----------------------------------------------------------------------

Comment By: David Miller (justdave72)
Date: 2008-05-04 06:42

Message:
Logged In: YES 
user_id=648592
Originator: YES

The check_http plugin apparently makes this same error in its certificate
checking code.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=397597&aid=1864404&group_id=29880