From 55c4a7b3a595ee20f9ebe830e1da16384b46d580 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Emmanuel=20Beno=C3=AEt?= <tseeker@nocternity.net>
Date: Fri, 19 Feb 2021 15:58:40 +0100
Subject: [PATCH] check_ssl_certificate - Handle the case of actually expired
 certificates

---
 cmd/check_ssl_certificate/main.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cmd/check_ssl_certificate/main.go b/cmd/check_ssl_certificate/main.go
index 3c92e4d..f1c5426 100644
--- a/cmd/check_ssl_certificate/main.go
+++ b/cmd/check_ssl_certificate/main.go
@@ -161,6 +161,9 @@ func (program *checkProgram) checkNames() bool {
 // thresholds, returning a status code and description based on these
 // values.
 func (program *checkProgram) checkCertificateExpiry(tlDays int) (plugin.Status, string) {
+	if tlDays <= 0 {
+		return plugin.CRITICAL, "certificate expired"
+	}
 	var limitStr string
 	var state plugin.Status
 	if program.crit > 0 && tlDays <= program.crit {