diff --git a/doc/10-icinga-template-library.md b/doc/10-icinga-template-library.md index 907d89831..969ae8267 100644 --- a/doc/10-icinga-template-library.md +++ b/doc/10-icinga-template-library.md @@ -5610,6 +5610,7 @@ ssl_cert_disable_ssl_versions | **Optional.** Disable specific SSL versions out ssl_cert_cipher | **Optional.** Cipher selection: force {ecdsa,rsa} authentication. ssl_cert_ignore_expiration | **Optional.** Ignore expiration date. ssl_cert_ignore_ocsp | **Optional.** Do not check revocation with OCSP. +ssl_cert_ignore_sct | **Optional.** Do not check for signed certificate timestamps. #### jmx4perl diff --git a/itl/plugins-contrib.d/web.conf b/itl/plugins-contrib.d/web.conf index c7c4d2358..73297063f 100644 --- a/itl/plugins-contrib.d/web.conf +++ b/itl/plugins-contrib.d/web.conf @@ -554,6 +554,10 @@ object CheckCommand "ssl_cert" { set_if = "$ssl_cert_ignore_ocsp$" description = "Do not check revocation with OCSP" } + "--ignore-sct" = { + set_if = "$ssl_cert_ignore_sct$" + description = "Do not check for signed certificate timestamps" + } }