On 30/01/13 14:07, Emmanuel Dreyfus wrote:
Hi
Please consider the attached patch that makes x509 xertificate validity
(notBeofre and notAfter) available in environement for the tls-verify
script.
I use it to monitor OpenVPN certificate expirations in Nagios. I can
share the Nagios bits with who
Gert Doering wrote:
> Can this not be done with PolarSSL, or did you not investigate?
I did not investigate, but I would be suprised if it would be difficult
for someone knowledgable in PolarSSL. I have left it to be implemented
by someone lese, I should have added a comment about that.
--
Emm
Hi,
On Wed, Jan 30, 2013 at 01:07:17PM +, Emmanuel Dreyfus wrote:
> +++ src/openvpn/ssl_verify_polarssl.c 2013-01-30 09:37:42.0 +0100
> @@ -140,8 +140,21 @@
>
>return buf;
> }
>
> +char *
> +x509_get_validity_notBefore (openvpn_x509_cert_t *cert, struct gc_arena *gc)
> +{
> +