Installing Icinga Certificate Monitoring from Source¶

Please see the Icinga Web documentation on how to install modules from source. Make sure you use x509 as the module name. The following requirements must also be met.

Requirements¶

PHP (≥7.2)
MySQL or PostgreSQL PDO PHP libraries
The following PHP modules must be installed: gmp, pcntl, openssl
Icinga Web (≥2.9)
Icinga PHP Library (ipl) (≥0.13.0)
Icinga PHP Thirdparty (≥0.12.0)

Setting up the Database¶

Setting up a MySQL or MariaDB Database¶

The module needs a MySQL/MariaDB database with the schema that’s provided in the /usr/share/icingaweb2/modules/x509/schema/mysql.schema.sql file.

You can use the following sample command for creating the MySQL/MariaDB database. Please change the password:

CREATE DATABASE x509;
GRANT CREATE, SELECT, INSERT, UPDATE, DELETE, DROP, ALTER, CREATE VIEW, INDEX, EXECUTE ON x509.* TO x509@localhost IDENTIFIED BY 'secret';

After, you can import the schema using the following command:

mysql -p -u root x509 < /usr/share/icingaweb2/modules/x509/schema/mysql.schema.sql

Setting up a PostgreSQL Database¶

The module needs a PostgreSQL database with the schema that’s provided in the /usr/share/icingaweb2/modules/x509/schema/pgsql.schema.sql file.

You can use the following sample command for creating the PostgreSQL database. Please change the password:

CREATE USER x509 WITH PASSWORD 'secret';
CREATE DATABASE x509
  WITH OWNER x509
  ENCODING 'UTF8'
  LC_COLLATE = 'en_US.UTF-8'
  LC_CTYPE = 'en_US.UTF-8';

After, you can import the schema using the following command:

psql -U x509 x509 -a -f /usr/share/icingaweb2/modules/x509/schema/pgsql.schema.sql

This concludes the installation. You should now be able to import CA certificates and set up scan jobs. Please read the Configuration section for details.