diff --git a/Metadata/groups.xml b/Metadata/groups.xml index 8aaae7d..6a84a6e 100644 --- a/Metadata/groups.xml +++ b/Metadata/groups.xml @@ -29,6 +29,7 @@ + - @@ -194,6 +194,7 @@ + - + - @@ -290,7 +290,6 @@ profile="true"> - @@ -337,7 +336,6 @@ - @@ -440,7 +438,6 @@ comment="profile minimal pour lenny"> - @@ -448,7 +445,6 @@ comment="profile minimal pour squeeze"> - @@ -692,6 +688,10 @@ + + + + @@ -906,6 +906,7 @@ + diff --git a/Python/etc/cron.d/check_cert b/Python/etc/cron.d/check_cert index 0ebe8b5..f93c62b 100644 --- a/Python/etc/cron.d/check_cert +++ b/Python/etc/cron.d/check_cert @@ -6,13 +6,21 @@ info["perms"] = 0644 header("Check SSL certificates") -def check_cert(host='localhost', port=443, user="www-data"): - print "42 7 * * * %(user)s /usr/scripts/utils/check_cert.py %(host)s %(port)s" %\ - { 'host': host, +def check_cert(host='localhost', port=443, user="www-data", filename=None): + params={ + 'host': host, 'port': port, 'user': user, + 'filename': filename, } + if filename: + print "43 7 * * * %(user)s /usr/scripts/utils/check_cert.py --filename %(filename)s" %\ + params + else: + print "42 7 * * * %(user)s /usr/scripts/utils/check_cert.py %(host)s %(port)s" %\ + params +# Host specific if has('https-server') or has('https_cert'): check_cert('localhost', 443, 'www-data') @@ -21,3 +29,14 @@ if has('bcfg2-server'): if has('asterisk'): check_cert('localhost', 5061) + +# file specific +if has('eap'): + check_cert(filename='/etc/freeradius/certs/wifi.crt', user='freerad') + +if has('vpn'): + check_cert(filename='/etc/ssl/certs/vpn.pem', user='root') + +if has('xmpp'): + check_cert(filename='/etc/ssl/certs/jabber_server.pem', user='jabber') +