Monitor SSL Cert installed on F5 loadbalancer?

[amybrown]

Is it possible to use the XI website wizard to monitor the expiration of a website SSL cert if the cert is installed on an F5 load balancer?

I've got this setup, but it's currently not working. I've validated with networking that we aren't getting hung up on the firewall wall. The error I'm seeing is "Connection refused HTTP CRITICAL - Unable to open TCP socket"

(Nagios XI 2012R2.4 installed on RHEL)

[tmcdonald]

Through the monitoring wizard? I don't believe so. I don't have an expired cert to check against otherwise I would look at the string matching. Have you looked at check_ssl_certificate at all?

EDIT: While the wizard does not allow this, you can always go in and edit the command to do the following:

Code: Select all

./check_http -H <host> -C <number>

where C is how many days out a cert can expire and be considered OK. Set this to 1 (or maybe 0?) to basically ensure a correct check. Again, no expired cert to check against so I don't know is 0 will work.