Check for Debian SMTP CA cert expiration

Note that despite its name this CA is also used for at least SSL tunnels,
and PostgreSQL.

diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg
index 818cfcc..af2a92b 100644 (file)
--- a/config/nagios-master.cfg
+++ b/config/nagios-master.cfg
@@ -2907,6 +2907,14 @@ services:
     check_interval: 60
     hosts: vogler
   ####
+  -
+    name: Debian SMTP CA
+    nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /srv/puppet.debian.org/ca/ca.crt"
+    hosts: handel
+    check_interval: 60
+    max_check_attempts: 2
+    retry_interval: 5
+  ####
   -
     name: puppetmaster cert
     nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"