check_http ssl error

[rjmon]

When i use check_http plugin with -S it works against F5 VIP not against IIS server. But if i include -S --ssl=3 then it works against IIS webserver not through F5 VIP url. Here is the scenario i am facing now.. Any ideas..


Going directly to the server wih -S --ssl=3 (if i dont use --ssl=3 then i get error cannot make ssl connection )

/usr/local/nagios/libexec/check_http -I winserver -k "Content-Type:text/xml" -k "Authorization: Basic TmFnaW9zV2luU3ZjUUEwNTp2Ukjhjhgm4yRldUKw==" -H vip.example.com -u /20091101/products.svc -S --ssl=3
HTTP OK: HTTP/1.1 200 OK - 3351 bytes in 0.022 second response time |time=0.021744s;;;0.000000 size=3351B;;;0


Going directly through VIP with -S --ssl=3 (if i dont use --ssl=3 out then it works fine)

/usr/local/nagios/libexec/check_http -I winvip.example.com-k "Content-Type:text/xml" -k "Authorization: Basic TmFnaW9zV2luU3ZjUUEwNTp2UkZaWm4yRldUKw==" -H vip.example.com -u /20091101/products.svc -S --ssl=3
CRITICAL - Cannot make SSL connection.
140611372820416:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.cSSL alert number 40


The same setting works in 5.2.8 not in 5.4.7

Nagios XI Version : 5.4.7

[rjmon]

i figured out the problem..

instead of -S --ssl=3 i switched to -S --ssl=2+ this solved the problem.

[npolovenko]

@rjmon, I'm glad you solved this! Should I go ahead and lock this thread now?

[rjmon]

You can close this one