Page 1 of 1

Monitoring SSL certificate on an externally hosted website

Posted: Thu Jun 08, 2017 11:31 am
by PhilG
Hello:
We are using Nagios XI 5.2.7, I have read and used the information suggested from https://assets.nagios.com/downloads/nag ... ios-XI.pdf.
The website we are monitoring is not hosted "inhouse" but with an external vendor.
We have purchased a valid certificate for the site, ex. "x.y.com" which will expire in 3 years.
When I setup monitoring for "x.y.com" I used the Nagios XI Website Wizard and used the DNS name and not the IP address. The IP resolves to the parent host.
However, when the Nagios XI check "check_xi_service_http_cert!30" runs, it is identifying the parent host certificate information, and thus warning that the parent host certificate will expire in 30 days instead of correctly identifying our valid certificate.

Is there a way to properly monitor the correct certificate?

Re: Monitoring SSL certificate on an externally hosted websi

Posted: Thu Jun 08, 2017 4:12 pm
by tgriep
Without knowing the domain you are testing, it is hard to replicate but can you run the following on the Nagios server and post the output?
Replace domain.com with your valid domain.

Code: Select all

/usr/local/nagios/libexec/check_http -H domain.com -C 30 -v
/usr/local/nagios/libexec/check_http -V

Re: Monitoring SSL certificate on an externally hosted websi

Posted: Thu Jul 27, 2017 11:33 am
by PhilG
We have decided to not monitor the "external" host.
You may close/lock this post.
Thank you.
tgriep wrote:Without knowing the domain you are testing, it is hard to replicate but can you run the following on the Nagios server and post the output?
Replace domain.com with your valid domain.

Code: Select all

/usr/local/nagios/libexec/check_http -H domain.com -C 30 -v
/usr/local/nagios/libexec/check_http -V