v0.12.0

[atc0005]

Overview

• Add new flags to check_cert plugin
• Change format of emitted performance data "expiration" metrics
• Change exit state for several scenarios
• Give leaf cert highest priority for non-OK states
• Bug fixes
• built using Go 1.19.6
  • Statically linked
  • Windows (x86, x64)
  • Linux (x86, x64)

Added

• (Add support for ignoring expired intermediate/root certificates #397) Add support for ignoring expired intermediate/root certificates
  • add ignore-expired-intermediate-certs flag to allow explicitly ignoring
    expired intermediate certificates in a chain
  • add ignore-expired-root-certs flag to allow explicitly ignoring expired
    intermediate certificates in a chain
• (Update netutils.GetCerts to log num certs fetched #530) Update netutils.GetCerts to log num certs fetched

Changed

• (check_cert | Give leaf cert highest priority when it is expiring or expired #281) check_cert | Give leaf cert highest priority when it is expiring or
  expired
• (Update handling of performance data metrics to allow emitting negative expiration values #529) Update handling of performance data metrics to allow emitting
  negative expiration values

Fixed

• (Setting up an "expiration only" monitoring configuration for a self-signed certificate without SANs entries fails unless ignore-hostname-verification-if-empty-sans flag is specified #505) Setting up an "expiration only" monitoring configuration for a
  self-signed certificate without SANs entries fails unless
  ignore-hostname-verification-if-empty-sans flag is specified
• (Explicitly ignoring OK/passing validation results does not work #525) Explicitly ignoring OK/passing validation results does not work
• (Fix Makefile find command printf syntax #531) Fix Makefile find command printf syntax
• (chcon: can't apply partial context to unlabeled file '/usr/lib64/nagios/plugins/check_cert' #509) chcon: can't apply partial context to unlabeled file
  '/usr/lib64/nagios/plugins/check_cert'
• (Use UNKNOWN state for perfdata add failures #536) Use UNKNOWN state for perfdata add failures
• (Use UNKNOWN state for invalid command-line args #537) Use UNKNOWN state for invalid command-line args
• (Use WARNING state for unexpected cert file content #538) Use WARNING state for unexpected cert file content

References

• See the v0.12.0 milestone for the issues associated with this release.
• See our CHANGELOG for more information.

---

This discussion was created from the release v0.12.0.