x509check showing all certificates as revoked

Help
,
1

I’ve configured the plugin to test some certificates with a minimal config (names changed for privacy):

jobs:

  - name: domain1_com
    source: https://domain1.com:443
    check_revocation_status: true

  - name: domain2_com
    source: https://domain2.com:443
    check_revocation_status: true

  - name: domain3_com
    source: https://domain3.com:443
    check_revocation_status: true

When I look at the output panel they all have a value of 0 indicating that they are revoked. I have a script that checks them and they are not on the associated CRL.

Am I missing something basic here?

Thanks!

2

Hey, @gcarey. What panel are you referring to? 1 is revoked, 0 is not revoked.

3

Yes @ilyam8, normally I would expect 0 to be a good thing. But documentation says that 0 means revoked unless it’s incorrect.

I will admit that I didn’t look at the code (yet).

2024-08-05_08-08-49
2024-08-05_08-08-491616×612 51 KB

4

@gcarey that is a wrong description, it is the opposite. I updated the chart in 18261. It will have 2 dimensions: revoked and not_revoked. 1 means status is active, 0 inactive.

5

Very good @ilyam8, that makes more sense. Zero should be the good status.

Thank you for your reply and great work!