From 23da63fdcf009e97c001c123eba66a652b8588bb Mon Sep 17 00:00:00 2001
From: Aurelien Jarno <aurelien@aurel32.net>
Date: Sun, 31 Mar 2019 20:50:16 +0200
Subject: [PATCH] Check for Debian SMTP CA cert expiration

Note that despite its name this CA is also used for at least SSL tunnels,
and PostgreSQL.
---
 config/nagios-master.cfg | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg
index 818cfcc..af2a92b 100644
--- a/config/nagios-master.cfg
+++ b/config/nagios-master.cfg
@@ -2907,6 +2907,14 @@ services:
     check_interval: 60
     hosts: vogler
   ####
+  -
+    name: Debian SMTP CA
+    nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /srv/puppet.debian.org/ca/ca.crt"
+    hosts: handel
+    check_interval: 60
+    max_check_attempts: 2
+    retry_interval: 5
+  ####
   -
     name: puppetmaster cert
     nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
-- 
2.20.1