SSL Cert failto make connection

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
vhoover
Posts: 123
Joined: Mon Sep 09, 2013 12:17 pm

Re: SSL Cert failto make connection

Post by vhoover »

check_http v1.4.15-46-gefa2 (nagios-plugins 1.4.15)
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: SSL Cert failto make connection

Post by abrist »

Is your load balancing implementation using virtual ports?
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
vhoover
Posts: 123
Joined: Mon Sep 09, 2013 12:17 pm

Re: SSL Cert failto make connection

Post by vhoover »

I believe so as they are virtual machines
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: SSL Cert failto make connection

Post by slansing »

Alright lets restructure your check:

Code: Select all

./check_http -H ip.of.host.here -S -v -C 14
vhoover
Posts: 123
Joined: Mon Sep 09, 2013 12:17 pm

Re: SSL Cert failto make connection

Post by vhoover »

This was the response when the above command was ran:

[root@nagios-test libexec]# ./check_http -H XX.XX.X.XX -v -C 14
CRITICAL - Cannot make SSL connection
CRITICAL - Cannot retrieve server certificate.

IP has been sanitized for privacy reasons, and when the FQDN is used instead of IP the result is the same, I cannot check via URL as the Web server is application layer load-balanced with two or three other servers.
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: SSL Cert failto make connection

Post by slansing »

You did not add the "-S" in as shown above. We want to verify if the ssl switch will make a difference in this case since "-C" should be setting the port as 443 already.
vhoover
Posts: 123
Joined: Mon Sep 09, 2013 12:17 pm

Re: SSL Cert failto make connection

Post by vhoover »

I added the -S (sorry missed that before) but to no avail the issue remains. The output remains the same as before:

[root@nagios-test libexec]# ./check_http -H 10.50.1.26 -S -v -C 14
CRITICAL - Cannot make SSL connection
CRITICAL - Cannot retrieve server certificate.
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: SSL Cert failto make connection

Post by abrist »

I assume this website serves ssl on port 443?
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
vhoover
Posts: 123
Joined: Mon Sep 09, 2013 12:17 pm

Re: SSL Cert failto make connection

Post by vhoover »

Yes it does also port 83
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: SSL Cert failto make connection

Post by slansing »

Can you run:

Code: Select all

./check_http -H ip.of.server.here -p 83 -S -v -C 14
Locked