Nagios/Icinga plugin for checking OPENPGPKEY (TYPE61) records.
Those records are defined in RFC7929, as a new way to lookup and retrieve PGP keys.
This plugin check for the existance of a record for the given user and can perform various other checks like expiration date.
-h, --help show this help message and exit
--id ID, -I ID Hostname to check.
--remaining-days REMAINING_DAYS
Minimum remaining days before expiry.
Format: INTEGER[,INTEGER]. 1st is days for warning,
2nd is critical.
--no-dnssec Continue even if DNS replies aren't DNSSEC authenticated.
--resolver RESOLVER Use a custom resolver.
--timeout TIMEOUT Network timeone in sec. Default: 10
--version show program's version number and exit
check_openpgpkey nemunaire@nemunai.recheck_openpgpkey -I 0x842807A84573CC96 nemunaire@nemunai.recheck_openpgpkey -R 60 -I 0x842807A84573CC96 nemunaire@nemunai.re
- Python >= 3.3
- dnspython
gpgbinary- DNSSEC capable resolver (or use
--no-dnssecbut be aware of the security implications)