Somehow this message that I sent Friday night/Saturday morning didn't get
through to the list...
-David
---------- Forwarded Message ----------
Date: Saturday, August 07, 2004 4:29 AM -0400
From: David Nolan <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: IMAPS and SMTPs monitor support
--On Saturday, August 07, 2004 1:24 AM +0200 seppo <[EMAIL PROTECTED]> wrote:
Is anybody kind enough to enhance
the basic imap.monitor and smtp.monitor for secure usage?
I've already done so, and the URLs for my versions are below. I'll
probably integrate them into the primary Mon distribution when I get a
chance to sit down and figure out exactly which of the scripts I've written
are interesting enough to be of general use.
For IMAP, I have scripts for both IMAP over SSL and IMAP with STARTTLS
(i.e. use SSL on the regular IMAP port).
Both my imap and smtp w/ ssl scripts also know how to warn about server ssl
certificates which are going to expire "soon" (where "soon" is a command
line argument.).
I actually recommend running the *-ssl scripts in two different mon
services, one without cert expiration enabled, and one with, and have the
one with expiration detection enabled only alert during daylight.
Assuming you give yourself a reasonable amount of time before expiration,
you don't want to get woken up at 4AM just because your certs are going to
expire soon. How long in advance you want to generate an alert probably
depends on who you get your certificates from. We feel that 10 days is
enough time to get a new cert from most CAs.
The URLs for my scripts are:
<https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/~checkout~/src/netsage/
mon/mon.d/imap-ssl.monitor?rev=1.4>
<https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/~checkout~/src/netsage/
mon/mon.d/imap-starttls.monitor?rev=1.3>
<https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/~checkout~/src/netsage/
mon/mon.d/smtp-ssl.monitor?rev=1.1>
-David Nolan
Network Software Designer
Computing Services
Carnegie Mellon University
---------- End Forwarded Message ----------
David Nolan <*> [EMAIL PROTECTED]
curses: May you be forced to grep the termcap of an unclean yacc while
a herd of rogue emacs fsck your troff and vgrind your pathalias!
_______________________________________________
mon mailing list
[EMAIL PROTECTED]
http://linux.kernel.org/mailman/listinfo/mon
