Page 3 of 7

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 12:13 pm
by vhoover
check_http v1.4.15-46-gefa2 (nagios-plugins 1.4.15)

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 12:18 pm
by abrist
Is your load balancing implementation using virtual ports?

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 12:22 pm
by vhoover
I believe so as they are virtual machines

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 12:22 pm
by slansing
Alright lets restructure your check:

Code: Select all

./check_http -H ip.of.host.here -S -v -C 14

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 12:26 pm
by vhoover
This was the response when the above command was ran:

[root@nagios-test libexec]# ./check_http -H XX.XX.X.XX -v -C 14
CRITICAL - Cannot make SSL connection
CRITICAL - Cannot retrieve server certificate.

IP has been sanitized for privacy reasons, and when the FQDN is used instead of IP the result is the same, I cannot check via URL as the Web server is application layer load-balanced with two or three other servers.

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 12:42 pm
by slansing
You did not add the "-S" in as shown above. We want to verify if the ssl switch will make a difference in this case since "-C" should be setting the port as 443 already.

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 12:50 pm
by vhoover
I added the -S (sorry missed that before) but to no avail the issue remains. The output remains the same as before:

[root@nagios-test libexec]# ./check_http -H 10.50.1.26 -S -v -C 14
CRITICAL - Cannot make SSL connection
CRITICAL - Cannot retrieve server certificate.

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 2:24 pm
by abrist
I assume this website serves ssl on port 443?

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 2:33 pm
by vhoover
Yes it does also port 83

Re: SSL Cert failto make connection

Posted: Mon Nov 18, 2013 4:57 pm
by slansing
Can you run:

Code: Select all

./check_http -H ip.of.server.here -p 83 -S -v -C 14