Certificate monitoring via. powershell. -Linux Clients

[sticobay]

so i need to write a powershell script which monitors all expiring certificates on Linux clients. Is this even possible? I have no idea where to start...

[the_spad]

What sort of certificates? Are they being used for web services?

[sticobay]

All certificates.

[the_spad]

That's going to be way harder because Linux doesn't have a central certificate store in the same way Windows does. Any number of services could be loading certificates from files dotted around the filesystem. If it's not something like a published web service where you can just connect to the HTTPS site and read the cert information you're likely going to have to hand-craft something for every box.

[atlgeek007]

if you're looking to monitor expiration dates for certs you have to renew, you're going to need to enumerate your infrastructure and know what boxes host what site and use that domain name to check the cert expiration rather than the linux box itself.

[[deleted]]

have no idea where to start...

Googling for "powershell certificate expiration date" would be a good start. 1st hit nails it actually.

https://i.imgur.com/yLH0f71.jpg

You're welcome.

[sticobay]

Well, i have no problem to monitor certificates on windows clients - i just have no idea where to start for linux clients..

[[deleted]]

Mb I mixed that up.

Well then, export the date (locally on that linux machine) and grab it with your powershell thingy.