External URL Setup w/ SSL

[mholtaftac]

Linux Distribution and version? CentOS 6.6
32 or 64bit? 64 bit
VMware Image or Manual Install of XI? VMware Image
Are there special configurations on your system, ie; is Gnome installed? Are you using a proxy? Are you using SSL? Using SSL
**If you are encountering multiple issues that may not be related, start a thread for each issue

I have SSL working with the program URL that is set to a name that resolves to an internal IP address (I used configuring SSL for Nagios XI to do this). I have a second URL that I want to set to resolve to an external IP on the firewall and redirect to the NagiosXI server for external access, however, I want to use an additional SSL cert that I have for the second URL.

So basically:
Program URL - SSL - https://nagiosUrl/nagiosxi
External URL - SSL - https://nagiosUrlExt/nagiosxi

Do I set this up in the external URL section under Admin - Manage System Config? And it so that can't be the only step.

[mholtaftac]

Update:

So, we set up an external IP to tie to the ExtUrl and it forwards internally and therefore, I can access the Nagios instance from external. Now I just need to know the steps for getting SSL to work. Right now I get a hostname mismatch for the SSL.

Program URL - SSL - https://nagiosUrl/nagiosxi
External URL - SSL - https://nagiosUrlExt/nagiosxi

Do I:

1. Modify my SSL certificate request to include nagiosUrl and nagiosUrlExt

or

2. Load an additional SSL cert for nagiosUrlEx, and if so, how do I load an SSL cert for a secondary, external URL?

[ssax]

Are you using a self-signed certificate, one signed by your local certificate authority, or one signed by a recognized certificate authority?

[mholtaftac]

Thank you for your reply. I've finally figured out what I needed to do. My problem was solved by ordering an SSL certificate with a SAN for the other name. This worked for me.

[rkennedy]

Great to hear! Are we good to mark this thread as resolved then?

[WillemDH]

You could also protect your external available Nagios XI with Apache config directives:

Code: Select all

<Directory "/usr/local/nagiosxi/html">
                Options None
                AllowOverride None
                Order deny,allow
                Deny from all
                Allow from 79.54.38.229 127.0.0.1 ::1 212.71.234.84 2a01:75e0::f03c:933:fe18:6141 fe80::2232:09e4:fe18:674c
                Require all granted
                Redirect permanent / https://outsideit.net/
</Directory>

[hsmith]

Thanks Willem