Installing Icinga Certificate Monitoring from Source¶
Please see the Icinga Web documentation on
how to install modules from source.
Make sure you use x509
as the module name. The following requirements must also be met.
Requirements¶
- PHP (≥7.2)
- MySQL or PostgreSQL PDO PHP libraries
- The following PHP modules must be installed:
gmp
,pcntl
,openssl
- Icinga Web (≥2.9)
- Icinga PHP Library (ipl) (≥0.13.0)
- Icinga PHP Thirdparty (≥0.12.0)
Setting up the Database¶
Setting up a MySQL or MariaDB Database¶
The module needs a MySQL/MariaDB database with the schema that’s provided in the /usr/share/icingaweb2/modules/x509/schema/mysql.schema.sql
file.
You can use the following sample command for creating the MySQL/MariaDB database. Please change the password:
CREATE DATABASE x509;
GRANT CREATE, SELECT, INSERT, UPDATE, DELETE, DROP, ALTER, CREATE VIEW, INDEX, EXECUTE ON x509.* TO x509@localhost IDENTIFIED BY 'secret';
After, you can import the schema using the following command:
mysql -p -u root x509 < /usr/share/icingaweb2/modules/x509/schema/mysql.schema.sql
Setting up a PostgreSQL Database¶
The module needs a PostgreSQL database with the schema that’s provided in the /usr/share/icingaweb2/modules/x509/schema/pgsql.schema.sql
file.
You can use the following sample command for creating the PostgreSQL database. Please change the password:
CREATE USER x509 WITH PASSWORD 'secret';
CREATE DATABASE x509
WITH OWNER x509
ENCODING 'UTF8'
LC_COLLATE = 'en_US.UTF-8'
LC_CTYPE = 'en_US.UTF-8';
After, you can import the schema using the following command:
psql -U x509 x509 -a -f /usr/share/icingaweb2/modules/x509/schema/pgsql.schema.sql
This concludes the installation. You should now be able to import CA certificates and set up scan jobs. Please read the Configuration section for details.