RaymiiOrg/nagios — pull request #2 by palli (2013-05-02 14:23:23+00:00)
Title: Patched check_ocsp_hard to suit my needs, feel free to pull the changes

I am monitoring multiple ocsp server, so i needed to modify the script a little bit so the hardcoded part did not work well for me. I never ran the original script but i believe my changes are backwards compatible.

* Error handling logic modified a little big, previously some error conditions were not detected
* Added a failback logic, if output is not recognized, exit with status unknown

Argument handling added to script, new arguments are:
-H host_name # remote host to check
-P port # port to use
--noverify # Don't verify is certificate is valid
--max-age 4800 # alert is certificate is about to expire
--cert filename # use this cert file instead of the hardcoded one
--issuer filename.pem # use this issuer certificate instead of the hardcoded one
--verbose # handy for troubleshooting, echos the exact openssl command used