Page 1 of 2
Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:02 pm
by mdsupersonic
Hi Support team,
I'm trying to monitor an external website and in some points I'm receiving critical notification regarding ssl connection.
I want to check SLL certificate of that website and i'm getting 'CRITICAL - Cannot make SSL connection.'
Attached is the screenshot of the website.
Any help would be appreciated.
Regards
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:07 pm
by mcapra
Can you show us the full check command being used for this service? Omitting the actual website if you have security considerations.
Is the check configured to use the proper port for the SSL connection?
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:14 pm
by mdsupersonic
-f ok -I 184.168.188.1 -u "/" -S -p 443
port should be 443
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:18 pm
by mcapra
Is the site front-facing? Can you run the site (assuming it is front-facing) through a service like SSLLabs and make sure everything checks out?
https://www.ssllabs.com/ssltest/
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:22 pm
by mdsupersonic
Assessment failed: No secure protocols supported
This website says this,but even with port 80 is not working.its something strange.
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:27 pm
by mdsupersonic
Please see the result in attach.
it seems it has TLS not SSL but nagios should monitor TLS too right?
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:34 pm
by mcapra
Do you know if the certificate was registered/configured to
www.website.com or
website.com? This could be where the conflict is occurring. Try removing the www from the host name.
From the command line, share the output of this:
Code: Select all
/usr/local/nagios/libexec/check_http -H website.com --port=443 --ssl
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:34 pm
by mdsupersonic
Sorry there was some mistake in website URL I have fixed it everything working fine execept one service has Warning notification.
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:40 pm
by mcapra
Is the 404 response expected from this website? Do you get that response when you visit it in a web browser? You could try adding -e 404 to the arguments if a 404 response is expected.
Re: Cannot make SSL connection.
Posted: Fri Aug 19, 2016 1:43 pm
by mdsupersonic
No,I get the same error from the website.It means it is right notification.
Thank you for your help.