Website monitoring conflicting information SSL

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
DoubleDoubleA
Posts: 286
Joined: Thu Feb 09, 2017 5:07 pm

Website monitoring conflicting information SSL

Post by DoubleDoubleA »

I ran the wizard to monitor a website, and I used the four default settings.

The dashboard for the site shows

CRITICAL - Cannot make SSL connection.

With this error:

139701147264872:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:769:

Here's the thing, though: I can point a browser at the site, it resolves, and it is https.

What is the source of the mismatch do you suppose?
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Website monitoring conflicting information SSL

Post by rkennedy »

From the CLI of XI - can you run the following and post it back here? This will give us a bit more verbosity as to what's going on with the connection.

Code: Select all

curl -v https://site.fqdn/path/to/your/page.ext
Former Nagios Employee
DoubleDoubleA
Posts: 286
Joined: Thu Feb 09, 2017 5:07 pm

Re: Website monitoring conflicting information SSL

Post by DoubleDoubleA »

Ok, looking back at it I think I didn't understand what the wizard would do with the information I put in there.

So, I deleted that host config and started over.

Three things:

1) When I first use the website monitoring wizard, after I put in the URL, I get a new page that shows the URL and the IP and all that ... just below that there is a section called Website Options where it asks if I want to monitor with SSL, and asks about login credentials. What does that do/how does that work?

2) So when I re-ran the config wizard, I did not check the box associated with "Use SSL". So I don't have that error this time, but now I have a new one for HTTP it shows:

HTTP CRITICAL - Invalid HTTP response received from host on port 443: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">

The site is up, I can get to it.

3) Here's that curl you asked for

curl -v https://it4smbs.com
* About to connect() to it4smbs.com port 443 (#0)
* Trying 65.181.125.105... connected
* Connected to it4smbs.com (65.181.125.105) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate:
* subject: CN=it4smbs.com
* start date: Dec 28 21:39:00 2016 GMT
* expire date: Mar 28 21:39:00 2017 GMT
* common name: it4smbs.com
* issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
> GET / HTTP/1.1
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.21 Basic ECC zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: it4smbs.com
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Fri, 10 Feb 2017 18:21:01 GMT
< Server: Apache/2.2.15 (CentOS)
< X-Powered-By: PHP/5.3.3
< Link: <https://it4smbs.com/wp-json/>; rel="https://api.w.org/"
< Link: <https://it4smbs.com/>; rel=shortlink
< Vary: Accept-Encoding
< Transfer-Encoding: chunked
< Content-Type: text/html; charset=UTF-8
<
<!DOCTYPE html>
<html lang="en-US">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<link rel="profile" href="http://gmpg.org/xfn/11">
<link rel="pingback" href="https://it4smbs.com/xmlrpc.php">

<title>websites that grow with you</title>
<link rel='dns-prefetch' href='//fonts.googleapis.com' />
<link rel='dns-prefetch' href='//s.w.org' />
<link rel="alternate" type="application/rss+xml" title="websites that grow with you » Feed" href="https://it4smbs.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="websites that grow with you » Comments Feed" href="https://it4smbs.com/comments/feed/" />
<script type="text/javascript">
window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/2.2.1\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/2.2.1\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/it4smbs.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.7.2"}};
!function(a,b,c){function d(a){var b,c,d,e,f=String.fromCharCode;if(!k||!k.fillText)return!1;switch(k.clearRect(0,0,j.width,j.height),k.textBaseline="top",k.font="600 32px Arial",a){case"flag":return k.fillText(f(55356,56826,55356,56819),0,0),!(j.toDataURL().length<3e3)&&(k.clearRect(0,0,j.width,j.height),k.fillText(f(55356,57331,65039,8205,55356,57096),0,0),b=j.toDataURL(),k.clearRect(0,0,j.width,j.height),k.fillText(f(55356,57331,55356,57096),0,0),c=j.toDataURL(),b!==c);case"emoji4":return k.fillText(f(55357,56425,55356,57341,8205,55357,56507),0,0),d=j.toDataURL(),k.clearRect(0,0,j.width,j.height),k.fillText(f(55357,56425,55356,57341,55357,56507),0,0),e=j.toDataURL(),d!==e}return!1}function e(a){var c=b.createElement("script");c.src=a,c.defer=c.type="text/javascript",b.getElementsByTagName("head")[0].appendChild(c)}var f,g,h,i,j=b.createElement("canvas"),k=j.getContext&&j.getContext("2d");for(i=Array("flag","emoji4"),c.supports={everything:!0,everythingExceptFlag:!0},h=0;h<i.length;h++)c.supports[i[h]]=d(i[h]),c.supports.everything=c.supports.everything&&c.supports[i[h]],"flag"!==i[h]&&(c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&c.supports[i[h]]);c.supports.everythingExceptFlag=c.supports.everythingExceptFlag&&!c.supports.flag,c.DOMReady=!1,c.readyCallback=function(){c.DOMReady=!0},c.supports.everything||(g=function(){c.readyCallback()},b.addEventListener?(b.addEventListener("DOMContentLoaded",g,!1),a.addEventListener("load",g,!1)):(a.attachEvent("onload",g),b.attachEvent("onreadystatechange",function(){"complete"===b.readyState&&c.readyCallback()})),f=c.source||{},f.concatemoji?e(f.concatemoji):f.wpemoji&&f.twemoji&&(e(f.twemoji),e(f.wpemoji)))}(window,document,window._wpemojiSettings);
</script>
<style type="text/css">
img.wp-smiley,
img.emoji {
display: inline !important;
border: none !important;
box-shadow: none !important;
height: 1em !important;
width: 1em !important;
margin: 0 .07em !important;
vertical-align: -0.1em !important;
background: none !important;
padding: 0 !important;
}
</style>
<link rel='stylesheet' id='woocommerce-layout-css' href='//it4smbs.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=2.6.14' type='text/css' media='all' />
<link rel='stylesheet' id='woocommerce-smallscreen-css' href='//it4smbs.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=2.6.14' type='text/css' media='only screen and (max-width: 768px)' />
<link rel='stylesheet' id='woocommerce-general-css' href='//it4smbs.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=2.6.14' type='text/css' media='all' />
<link rel='stylesheet' id='business-one-page-google-fonts-css' href='//fonts.googleapis.com/css?family=Source+Sans+Pro%3A400%2C400italic%2C600%7COxygen%3A400%2C700&ver=4.7.2' type='text/css' media='all' />
<link rel='stylesheet' id='font-awesome-css' href='https://it4smbs.com/wp-content/themes/b ... ?ver=4.7.2' type='text/css' media='all' />
<link rel='stylesheet' id='flexslider-css' href='https://it4smbs.com/wp-content/themes/b ... ?ver=4.7.2' type='text/css' media='all' />
<link rel='stylesheet' id='lightslider-css' href='https://it4smbs.com/wp-content/themes/b ... ?ver=4.7.2' type='text/css' media='all' />
<link rel='stylesheet' id='business-one-page-style-css' href='https://it4smbs.com/wp-content/themes/b ... ?ver=1.1.2' type='text/css' media='all' />
<script type='text/javascript' src='https://it4smbs.com/wp-includes/js/jque ... '></script>
<script type='text/javascript' src='https://it4smbs.com/wp-includes/js/jque ... '></script>
<link rel='https://api.w.org/' href='https://it4smbs.com/wp-json/' />
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://it4smbs.com/xmlrpc.php?rsd" />
<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="https://it4smbs.com/wp-includes/wlwmanifest.xml" />
<meta name="generator" content="WordPress 4.7.2" />
<meta name="generator" content="WooCommerce 2.6.14" />
<link rel="canonical" href="https://it4smbs.com/" />
<link rel='shortlink' href='https://it4smbs.com/' />
<link rel="alternate" type="application/json+oembed" href="https://it4smbs.com/wp-json/oembed/1.0/ ... mbs.com%2F" />
<link rel="alternate" type="text/xml+oembed" href="https://it4smbs.com/wp-json/oembed/1.0/ ... format=xml" />
<link rel="icon" href="https://it4smbs.com/wp-content/uploads/ ... -32x32.png" sizes="32x32" />
<link rel="icon" href="https://it4smbs.com/wp-content/uploads/ ... 92x192.png" sizes="192x192" />
<link rel="apple-touch-icon-precomposed" href="https://it4smbs.com/wp-content/uploads/ ... 80x180.png" />
<meta name="msapplication-TileImage" content="https://it4smbs.com/wp-content/uploads/ ... 70x270.png" />
</head>

<body class="home page-template page-template-template-home page-template-template-home-php page page-id-17 wp-custom-logo full-width">
<div id="page" class="site">

<div id="home">

<header id="masthead" class="site-header" role="banner">

<div class="container">

<div class="site-branding">

<a href="https://it4smbs.com/" class="custom-logo-link" rel="home" itemprop="url"><img width="95" height="95" src="https://it4smbs.com/wp-content/uploads/ ... icon-1.png" class="custom-logo" alt="" itemprop="logo" /></a>
<h1 class="site-title"><a href="https://it4smbs.com/" rel="home">websites that grow with you</a></h1>
</div><!-- .site-branding -->

<div id="nav-anchor"></div>

<nav id="site-navigation" class="main-navigation" role="navigation">
<ul>
<li class="current-menu-item"><a href="https://it4smbs.com/#home">Home</a></li>
<li><a href="https://it4smbs.com/#services">services</a></li>
</ul>
</nav>

</div><!-- .container -->

</header><!-- #masthead -->


</div><!-- #home -->


<section id="services">
<div class="container">
<header class="heading">
<h1>services</h1>
</header>
<div class="three-cols">
<div class="row">

<div class="col">
<div class="text-holder">
<h2 class="title">basic site</h2>
<p>Get your business on the Web now! Your customers expect you to have a site, and they expect to find you on the web. You need a website now. Our basic site is the best way to get started for not a lot of money. Includes a year of hosting — a $120 value.</p>
</div>
</div>
<div class="col">
<div class="text-holder">
<h2 class="title">basic SEO</h2>
<p>Once you have your basic site up and running, it’s time to get some new customers. SEO is the way to do that. We’ll register your site with search engines and directories so new customers can find you.</p>
</div>
</div>
<div class="col">
<div class="text-holder">
<h2 class="title">ongoing SEO</h2>
<p>Ongoing SEO is the most important thing you can do once your site is up and registered with search engines. after getting your site up and registering with the search engines, this is the most important thing you can do to maximize your exposure on the web. In fact, if you had to choose between a custom site or ongoing SEO, we would much rather see you do the ongoing SEO.</p>
</div>
</div>
<div class="col">
<div class="text-holder">
<h2 class="title">social media management</h2>
<p>Your website is just the beginning. Drive more customers through facebook, LinkedIn, Yelp!, and reviews.</p>
</div>
</div>
<div class="col">
<div class="text-holder">
<h2 class="title">custom site</h2>
<p dir="ltr">Contact us to discuss your wishes and to receive a custom quote.</p>
</div>
</div>
<div class="col">
<div class="text-holder">
<h2 class="title">ecommerce solutions</h2>
<p>Want to get paid right through your website? You can!</p>
</div>
</div>
</div>
</div>
</div>
</section>


<section id="cta1" class="promotional-block">
<div class="container">
<strong class="title">Introductory Offer</strong><p>Get a basic site for just $49! Get on the web now! Click here!</p>
</div>
</section>


<footer id="colophon" class="site-footer" role="contentinfo">

<div class="container">

<div class="site-info">Copyright © 2017 <a href="https://it4smbs.com/">websites that grow with you</a> · <a href="http://raratheme.com/wordpress-themes/b ... -one-page/" rel="designer" target="_blank">Business One Page by: Rara Theme</a> · Powered by: <a href="https://wordpress.org/" target="_blank">WordPress</a></div>
</div><!-- .container -->

<a href="#page" class="scrollup">Scroll</a>

</footer><!-- #colophon -->
</div><!-- #page -->

<script type='text/javascript'>
/* <![CDATA[ */
var wc_add_to_cart_params = {"ajax_url":"\/wp-admin\/admin-ajax.php","wc_ajax_url":"\/?wc-ajax=%%endpoint%%","i18n_view_cart":"View Cart","cart_url":"https:\/\/it4smbs.com\/cart\/","is_cart":"","cart_redirect_after_add":"no"};
/* ]]> */
</script>
<script type='text/javascript' src='//it4smbs.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=2.6.14'></script>
<script type='text/javascript' src='//it4smbs.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70'></script>
<script type='text/javascript'>
/* <![CDATA[ */
var woocommerce_params = {"ajax_url":"\/wp-admin\/admin-ajax.php","wc_ajax_url":"\/?wc-ajax=%%endpoint%%"};
/* ]]> */
</script>
<script type='text/javascript' src='//it4smbs.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=2.6.14'></script>
<script type='text/javascript' src='//it4smbs.com/wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=1.4.1'></script>
<script type='text/javascript'>
/* <![CDATA[ */
var wc_cart_fragments_params = {"ajax_url":"\/wp-admin\/admin-ajax.php","wc_ajax_url":"\/?wc-ajax=%%endpoint%%","fragment_name":"wc_fragments"};
/* ]]> */
</script>
<script type='text/javascript' src='//it4smbs.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=2.6.14'></script>
<script type='text/javascript' src='https://it4smbs.com/wp-includes/js/imag ... '></script>
<script type='text/javascript' src='https://it4smbs.com/wp-includes/js/maso ... '></script>
<script type='text/javascript' src='https://it4smbs.com/wp-content/themes/b ... '></script>
<script type='text/javascript' src='https://it4smbs.com/wp-content/themes/b ... '></script>
<script type='text/javascript' src='https://it4smbs.com/wp-content/themes/b ... '></script>
<script type='text/javascript' src='https://it4smbs.com/wp-content/themes/b ... '></script>
<script type='text/javascript'>
/* <![CDATA[ */
var business_one_page_data = {"auto":"1","loop":"1","pager":"1","animation":"slide","speed":"7000","a_speed":"600"};
/* ]]> */
</script>
<script type='text/javascript' src='https://it4smbs.com/wp-content/themes/b ... '></script>
<script type='text/javascript' src='https://it4smbs.com/wp-includes/js/wp-e ... '></script>

</body>
</html>

<!-- Performance optimized by W3 Total Cache. Learn more: https://www.w3-edge.com/products/

Page Caching using disk: enhanced (SSL caching disabled)
Database Caching 1/47 queries in 0.028 seconds using disk

* Connection #0 to host it4smbs.com left intact
* Closing connection #0
Served from: it4smbs.com @ 2017-02-11 00:21:02 by W3 Total Cache -->
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Website monitoring conflicting information SSL

Post by rkennedy »

The curl looks fine from what I can tell, no issues with SSL.

Looking at the error message you posted -

Code: Select all

HTTP CRITICAL - Invalid HTTP response received from host on port 443: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
It would appear the check it attempting to run without SSL, but still against 443, which won't work. I suspect somewhere in the service /command definition there's a -p 443.

If you can't find it, could you post the command definition and service definition for us to review?
Former Nagios Employee
DoubleDoubleA
Posts: 286
Joined: Thu Feb 09, 2017 5:07 pm

Re: Website monitoring conflicting information SSL

Post by DoubleDoubleA »

You were correct, there was a -p 443. I removed it and it now checks ok.

Thanks
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Website monitoring conflicting information SSL

Post by rkennedy »

Great to hear that's what it was! Are we good to mark this one resolved?
Former Nagios Employee
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: Website monitoring conflicting information SSL

Post by tmcdonald »

Closing.
Former Nagios employee
Locked