Page 1 of 1

check_http invalid option ssl is not available

Posted: Thu Oct 15, 2015 1:43 pm
by Hengendro
Hi,

I configured Nagios 4.1.1 in Centos and the check_http plugin to monitor some websites but i have the same problem some people, this problem is that SSL is not available when i tried to check a https website, i recompile the plugins with the ./configure --with-openssl=/usr/bin/openssl option but still getting same error. Please help me.

This are my configurations:

1-

Code: Select all

Package 1:openssl-devel-1.0.1e-42.el7.9.x86_64 already installed and latest version, Nothing to do 


2- Monitor Plugins Folder

Code: Select all

 [root@linux monitoring-plugins-2.1.1]# ./configure --with-openssl=/usr/bin/openssl 


3- Same Error....

Code: Select all

[root@linux monitoring-plugins-2.1.1]# /usr/local/nagios/libexec/check_http -H digid.nl -C 30
check_http: Invalid option - SSL is not available
Usage:
 check_http -H <vhost> | -I <IP-address> [-u <uri>] [-p <port>]
       [-J <client certificate file>] [-K <private key>]
       [-w <warn time>] [-c <critical time>] [-t <timeout>] [-L] [-E] [-a auth]
       [-b proxy_auth] [-f <ok|warning|critcal|follow|sticky|stickyport>]
       [-e <expect>] [-d string] [-s string] [-l] [-r <regex> | -R <case-insensitive regex>]
       [-P string] [-m <min_pg_size>:<max_pg_size>] [-4|-6] [-N] [-M <age>]
       [-A string] [-k string] [-S <version>] [--sni] [-C <warn_age>[,<crit_age>]]
       [-T <content-type>] [-j method]
if you know any solution for this error would greatly appreciate it

Re: check_http invalid option ssl is not available

Posted: Thu Oct 15, 2015 2:12 pm
by rkennedy
After you run the ./configure --with-openssl please run the following.

Code: Select all

make
make install
That should work, let us know the result.

Re: check_http invalid option ssl is not available

Posted: Thu Oct 15, 2015 2:17 pm
by Hengendro
Sorry, yes, i put make and make install after ./configure --with-openssl but getting same error....

Re: check_http invalid option ssl is not available

Posted: Thu Oct 15, 2015 2:39 pm
by rkennedy
Hmm, do you have the regular openssl installed as well?
yum install openssl

Re: check_http invalid option ssl is not available

Posted: Thu Oct 15, 2015 2:43 pm
by Hengendro
Yes i have

Code: Select all

[root@linux monitoring-plugins-2.1.1]# yum install openssl
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror.gtdinternet.com
 * epel: epel.gtdinternet.com
 * extras: mirror.gtdinternet.com
 * updates: mirror.gtdinternet.com
Package 1:openssl-1.0.1e-42.el7.9.x86_64 already installed and latest version
Nothing to do

Re: check_http invalid option ssl is not available

Posted: Thu Oct 15, 2015 3:27 pm
by rkennedy
I attempted to recreate this issue and it seems to be working fine on my end. Are you behind any kind of proxy that would filter port :443? Can you please post the output that after running ./configure --with-openssl? It will be similar to what's below.

Code: Select all

config.status: creating po/Makefile
            --with-apt-get-command:
              --with-ping6-command: /bin/ping6 -n -U -w %d -c %d %s
               --with-ping-command: /bin/ping -n -U -w %d -c %d %s
                       --with-ipv6: yes
                      --with-mysql: /usr/bin/mysql_config
                    --with-openssl: yes
                     --with-gnutls: no
               --enable-extra-opts: yes
                       --with-perl: /usr/bin/perl
             --enable-perl-modules: no
                     --with-cgiurl: /nagios/cgi-bin
               --with-trusted-path: /usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
                   --enable-libtap: no

Re: check_http invalid option ssl is not available

Posted: Thu Oct 15, 2015 3:44 pm
by Hengendro
rkennedy, this is the command output:

Code: Select all

 --with-apt-get-command:
              --with-ping6-command: /usr/sbin/ping6 -n -U -w %d -c %d %s
               --with-ping-command: /usr/bin/ping -n -U -w %d -c %d %s
                       --with-ipv6: yes
                      --with-mysql: no
                    --with-openssl: yes
                     --with-gnutls: no
               --enable-extra-opts: yes
                       --with-perl: /usr/bin/perl
             --enable-perl-modules: no
                     --with-cgiurl: /nagios/cgi-bin
               --with-trusted-path: /usr/local/sbin:/usr/local/bin:/sbin:/bin:/u       sr/sbin:/usr/bin
                   --enable-libtap: no
And i'm not behind of proxy.

Re: check_http invalid option ssl is not available

Posted: Fri Oct 16, 2015 11:44 am
by eloyd
For fun, can you do this (assuming you're on a fairly generic RHEL/CentOS box) and post the results?

Code: Select all

rpm -qa | grep -i ssl | sort

Re: check_http invalid option ssl is not available

Posted: Fri Oct 16, 2015 2:40 pm
by hsmith
Thanks Eric.

Let us know what you come up with @Hengendro.