Monitoring SSL certificate on an externally hosted website

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
PhilG
Posts: 286
Joined: Thu Jan 16, 2014 10:24 am

Monitoring SSL certificate on an externally hosted website

Post by PhilG »

Hello:
We are using Nagios XI 5.2.7, I have read and used the information suggested from https://assets.nagios.com/downloads/nag ... ios-XI.pdf.
The website we are monitoring is not hosted "inhouse" but with an external vendor.
We have purchased a valid certificate for the site, ex. "x.y.com" which will expire in 3 years.
When I setup monitoring for "x.y.com" I used the Nagios XI Website Wizard and used the DNS name and not the IP address. The IP resolves to the parent host.
However, when the Nagios XI check "check_xi_service_http_cert!30" runs, it is identifying the parent host certificate information, and thus warning that the parent host certificate will expire in 30 days instead of correctly identifying our valid certificate.

Is there a way to properly monitor the correct certificate?
Newbie '14
User avatar
tgriep
Madmin
Posts: 9190
Joined: Thu Oct 30, 2014 9:02 am

Re: Monitoring SSL certificate on an externally hosted websi

Post by tgriep »

Without knowing the domain you are testing, it is hard to replicate but can you run the following on the Nagios server and post the output?
Replace domain.com with your valid domain.

Code: Select all

/usr/local/nagios/libexec/check_http -H domain.com -C 30 -v
/usr/local/nagios/libexec/check_http -V
Be sure to check out our Knowledgebase for helpful articles and solutions!
PhilG
Posts: 286
Joined: Thu Jan 16, 2014 10:24 am

Re: Monitoring SSL certificate on an externally hosted websi

Post by PhilG »

We have decided to not monitor the "external" host.
You may close/lock this post.
Thank you.
tgriep wrote:Without knowing the domain you are testing, it is hard to replicate but can you run the following on the Nagios server and post the output?
Replace domain.com with your valid domain.

Code: Select all

/usr/local/nagios/libexec/check_http -H domain.com -C 30 -v
/usr/local/nagios/libexec/check_http -V
Newbie '14
Locked