Cannot make SSL connection.

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
mdsupersonic
Posts: 84
Joined: Fri May 13, 2016 2:25 pm

Cannot make SSL connection.

Post by mdsupersonic »

Hi Support team,
I'm trying to monitor an external website and in some points I'm receiving critical notification regarding ssl connection.
I want to check SLL certificate of that website and i'm getting 'CRITICAL - Cannot make SSL connection.'
Attached is the screenshot of the website.
Any help would be appreciated.

Regards
You do not have the required permissions to view the files attached to this post.
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Cannot make SSL connection.

Post by mcapra »

Can you show us the full check command being used for this service? Omitting the actual website if you have security considerations.

Is the check configured to use the proper port for the SSL connection?
Former Nagios employee
https://www.mcapra.com/
mdsupersonic
Posts: 84
Joined: Fri May 13, 2016 2:25 pm

Re: Cannot make SSL connection.

Post by mdsupersonic »

-f ok -I 184.168.188.1 -u "/" -S -p 443

port should be 443
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Cannot make SSL connection.

Post by mcapra »

Is the site front-facing? Can you run the site (assuming it is front-facing) through a service like SSLLabs and make sure everything checks out?

https://www.ssllabs.com/ssltest/
Former Nagios employee
https://www.mcapra.com/
mdsupersonic
Posts: 84
Joined: Fri May 13, 2016 2:25 pm

Re: Cannot make SSL connection.

Post by mdsupersonic »

Assessment failed: No secure protocols supported

This website says this,but even with port 80 is not working.its something strange.
mdsupersonic
Posts: 84
Joined: Fri May 13, 2016 2:25 pm

Re: Cannot make SSL connection.

Post by mdsupersonic »

Please see the result in attach.

it seems it has TLS not SSL but nagios should monitor TLS too right?
You do not have the required permissions to view the files attached to this post.
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Cannot make SSL connection.

Post by mcapra »

Do you know if the certificate was registered/configured to www.website.com or website.com? This could be where the conflict is occurring. Try removing the www from the host name.

From the command line, share the output of this:

Code: Select all

/usr/local/nagios/libexec/check_http -H website.com --port=443 --ssl
Former Nagios employee
https://www.mcapra.com/
mdsupersonic
Posts: 84
Joined: Fri May 13, 2016 2:25 pm

Re: Cannot make SSL connection.

Post by mdsupersonic »

Sorry there was some mistake in website URL I have fixed it everything working fine execept one service has Warning notification.
You do not have the required permissions to view the files attached to this post.
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Cannot make SSL connection.

Post by mcapra »

Is the 404 response expected from this website? Do you get that response when you visit it in a web browser? You could try adding -e 404 to the arguments if a 404 response is expected.
Former Nagios employee
https://www.mcapra.com/
mdsupersonic
Posts: 84
Joined: Fri May 13, 2016 2:25 pm

Re: Cannot make SSL connection.

Post by mdsupersonic »

No,I get the same error from the website.It means it is right notification.
Thank you for your help.
Locked