JMeter Annotation Cheatsheet

import javax.net.ssl.*
import java.security.cert.X509Certificate
import java.text.SimpleDateFormat
import groovy.json.JsonOutput

def host = vars.get("target_host") ?: "example.com"
def port = (vars.get("target_port") ?: "443").toInteger()
def warningDays = (vars.get("warning_days") ?: "30").toInteger()
def criticalDays = (vars.get("critical_days") ?: "7").toInteger()

try {
    // Create SSL connection and extract certificate
    def sslCtx = SSLContext.getInstance("TLS")
    def tm = [
        checkClientTrusted: { chain, type -> },
        checkServerTrusted: { chain, type -> },
        getAcceptedIssuers: { null }
    ] as X509TrustManager
    sslCtx.init(null, [tm] as TrustManager[], null)

    def factory = sslCtx.getSocketFactory()
    def socket = factory.createSocket(host, port) as SSLSocket
    socket.startHandshake()

    def certs = socket.getSession().getPeerCertificates()
    def x509 = certs[0] as X509Certificate
    socket.close()

    // Calculate days until expiry
    def expiry = x509.getNotAfter()
    def now = new Date()
    def daysUntilExpiry = ((expiry.time - now.time) / (1000 * 60 * 60 * 24)).intValue()
    def sdf = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss")

    // Set result variables
    vars.put("cert_subject", x509.getSubjectDN().toString())
    vars.put("cert_issuer", x509.getIssuerDN().toString())
    vars.put("cert_expiry_date", sdf.format(expiry))
    vars.put("cert_days_remaining", daysUntilExpiry.toString())
    vars.put("cert_serial", x509.getSerialNumber().toString(16))

    // Build response
    def result = [
        host: host, port: port,
        subject: x509.getSubjectDN().toString(),
        issuer: x509.getIssuerDN().toString(),
        notBefore: sdf.format(x509.getNotBefore()),
        notAfter: sdf.format(expiry),
        daysRemaining: daysUntilExpiry,
        serial: x509.getSerialNumber().toString(16),
        status: daysUntilExpiry <= criticalDays ? "CRITICAL" :
                daysUntilExpiry <= warningDays ? "WARNING" : "OK"
    ]

    SampleResult.setResponseData(
        JsonOutput.prettyPrint(JsonOutput.toJson(result)), "UTF-8")
    SampleResult.setResponseCode("200")
    SampleResult.setResponseMessage(
        "Certificate expires in ${daysUntilExpiry} days")

    // Mark as failed if critical
    if (daysUntilExpiry <= criticalDays) {
        SampleResult.setSuccessful(false)
        SampleResult.setResponseMessage(
            "CRITICAL: Certificate expires in ${daysUntilExpiry} days!")
        log.error("CRITICAL: ${host} cert expires in ${daysUntilExpiry} days!")
    } else if (daysUntilExpiry <= warningDays) {
        log.warn("WARNING: ${host} cert expires in ${daysUntilExpiry} days")
    } else {
        SampleResult.setSuccessful(true)
        log.info("OK: ${host} cert expires in ${daysUntilExpiry} days")
    }

} catch (Exception e) {
    SampleResult.setSuccessful(false)
    SampleResult.setResponseCode("500")
    SampleResult.setResponseMessage("Certificate check failed: ${e.message}")
    log.error("Certificate check failed for ${host}: ${e.message}")
}

# hosts.csv
target_host,target_port,warning_days,critical_days
api.example.com,443,30,7
web.example.com,443,30,7
mail.example.com,993,30,7
internal.example.com,8443,14,3