Certificate error during apply and in system profile

[WillemDH]

Hello,

Since I configured an SSL certificate for our server, I'm seeing this error in our system profile and during apply configuration in cmdsubsys.log:

ERROR: certificate common name "nagios.fqdn" doesn't match requested host name "localhost".

How can I make the error go away? Everything seems to work normally, so it is probably a cosmetic error related to Nagios using localhost in the target url, instead of the fqdn hostname for which the certificate is created.

Willem

[rkennedy]

Can you verify what your Program URL, and External URL are set to? This might be where localhost needs to be changed.

[WillemDH]

Program URL is: https://nagiosserver/nagiosxi/

External URL is: https://nagiosserver/nagiosxi/

I don't think the issue is in the program settings.

[scottwilkerson]

How can I make the error go away? Everything seems to work normally, so it is probably a cosmetic error related to Nagios using localhost in the target url, instead of the fqdn hostname for which the certificate is created.

It is just that. Because your certificate doesn't match you are getting this error in the underlying calls to localhost. These calls are designed to ignore domain mismatches but we do push the full output to the cmdsubsys.log

[WillemDH]

Scott,

Ok, so I can safely ignore this I guess? Sorry I can't help it, the words warning and error make my head spin and just make me start looking for ways to get rid of them..

Grtz

[tmcdonald]

I worried about the same thing the first time I set up my own server. It is cosmetic, and I have never seen it actually affect anything.

[scottwilkerson]

Scott,

Ok, so I can safely ignore this I guess? Sorry I can't help it, the words warning and error make my head spin and just make me start looking for ways to get rid of them..

Grtz

Yes you can safely ignore them. 99.99% of users never need to look at the cmdsbsys.log. We purposely log all error/warning output though simply because that log file is used for debugging purposes and we want the verbose output.

[hsmith]

Willem, you can also add the -q flag to the wget commands in the scripts, and the error won't jump out at you. It's not really a 'fix', but it won't be in your face.

[WillemDH]

Ok all thanks for the input. Please close.