Website Wizard: Cannot make SSL connection.

[TBT]

Using the Website Wizard to monitor a SSL Certificate, the check is returning: Critical CRITICAL - Cannot make SSL connection.

1. Manual check also fails
./check_http -H <server> -C 30,7 -p 443
CRITICAL - Cannot make SSL connection.

2. Browsing with both Firefox and Chrome to the URL works with no cert errors.

Any suggestions?

[benjaminsmith]

Hi,

Let's add the -v flag to the command line for verbose output to help troubleshoot the error. Please run the following and post the full output from the check command.

Code: Select all

./check_http -H <server> -C 30,7 -p 44 -v

Also, please try the following version and post the full output as well. Thanks! Benjamin

Code: Select all

./check_http -H <server> -C 30,7 -p 44 --sni -v

[TBT]

Assuming you meant 443, here are the results:

Code: Select all

./check_http -H <server> -C 30,7 -p 443 -v
CRITICAL - Cannot make SSL connection.
SSL initialized

Code: Select all

./check_http -H <server> -C 30,7 -p 443 --sni -v
SSL initialized
SSL OK - Certificate '<server>' will expire on 2022-04-27 19:59 -0400/EDT.

[benjaminsmith]

Hi,

Thanks for testing that.. Looks like adding the --sni option works.

--sni
Enable SSL/TLS hostname extension support (SNI)

https://www.monitoring-plugins.org/doc/ ... _http.html

[TBT]

Hi,

Thanks for testing that.. Looks like adding the --sni option works.

--sni
Enable SSL/TLS hostname extension support (SNI)

https://www.monitoring-plugins.org/doc/ ... _http.html

Ah yes, this bit me once before! Issue resolved with Server Name Indication (SNI) flag.

[benjaminsmith]

Hi @TBT,

Excellent! We'll mark this as resolved. Feel free to open a new post if you have any new questions.

Benjamin