Hello,
I have to monitor some websites using SSL with different ports (not 443). I am using the Monitor a Website Wizard, and I can see it has a port address which is good. Our IT group tells me I have to use a certificate. Are there instructions for installing an SSL pem format cert? Is this a standard Linux question?
Thanks for your patience. I haven't done these things in Linux yet.
Nagios XI 2012.R1.8
Redhat 6.4
SSL Website checks
-
sreinhardt
- -fno-stack-protector
- Posts: 4366
- Joined: Mon Nov 19, 2012 12:10 pm
Re: SSL Website checks
I would highly suggest looking at the check_http plugin help. You can the plugin as it is to check ssl and tls connections, however it doesn't really provide a way to add a client certificate and use that for authentication that I know of. However you can specify SSL version and date checking on the certificate server side.
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.
-
intelXIadmin
- Posts: 65
- Joined: Mon Mar 25, 2013 9:10 am
Re: SSL Website checks
Thank you. I read the doc and am easily able to monitor any port using an ssl connection. But the cert is an issue, as I will need to use a client cert for authentication. But you believe this just isn't possible?
Regards,
Randy.
Regards,
Randy.
sreinhardt wrote:I would highly suggest looking at the check_http plugin help. You can the plugin as it is to check ssl and tls connections, however it doesn't really provide a way to add a client certificate and use that for authentication that I know of. However you can specify SSL version and date checking on the certificate server side.
Re: SSL Website checks
I am not sure if this is possible. We don't have this scenario documented (or tested).
Be sure to check out our Knowledgebase for helpful articles and solutions!
-
intelXIadmin
- Posts: 65
- Joined: Mon Mar 25, 2013 9:10 am
Re: SSL Website checks
I found the answer in the check_https doc. You have to use the -s option.
Regards,
Randy.
Regards,
Randy.