check_http ssl error
Posted: Wed Jan 10, 2018 10:59 am
When i use check_http plugin with -S it works against F5 VIP not against IIS server. But if i include -S --ssl=3 then it works against IIS webserver not through F5 VIP url. Here is the scenario i am facing now.. Any ideas..
Going directly to the server wih -S --ssl=3 (if i dont use --ssl=3 then i get error cannot make ssl connection )
/usr/local/nagios/libexec/check_http -I winserver -k "Content-Type:text/xml" -k "Authorization: Basic TmFnaW9zV2luU3ZjUUEwNTp2Ukjhjhgm4yRldUKw==" -H vip.example.com -u /20091101/products.svc -S --ssl=3
HTTP OK: HTTP/1.1 200 OK - 3351 bytes in 0.022 second response time |time=0.021744s;;;0.000000 size=3351B;;;0
Going directly through VIP with -S --ssl=3 (if i dont use --ssl=3 out then it works fine)
/usr/local/nagios/libexec/check_http -I winvip.example.com-k "Content-Type:text/xml" -k "Authorization: Basic TmFnaW9zV2luU3ZjUUEwNTp2UkZaWm4yRldUKw==" -H vip.example.com -u /20091101/products.svc -S --ssl=3
CRITICAL - Cannot make SSL connection.
140611372820416:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c
SSL alert number 40
The same setting works in 5.2.8 not in 5.4.7
Nagios XI Version : 5.4.7
Going directly to the server wih -S --ssl=3 (if i dont use --ssl=3 then i get error cannot make ssl connection )
/usr/local/nagios/libexec/check_http -I winserver -k "Content-Type:text/xml" -k "Authorization: Basic TmFnaW9zV2luU3ZjUUEwNTp2Ukjhjhgm4yRldUKw==" -H vip.example.com -u /20091101/products.svc -S --ssl=3
HTTP OK: HTTP/1.1 200 OK - 3351 bytes in 0.022 second response time |time=0.021744s;;;0.000000 size=3351B;;;0
Going directly through VIP with -S --ssl=3 (if i dont use --ssl=3 out then it works fine)
/usr/local/nagios/libexec/check_http -I winvip.example.com-k "Content-Type:text/xml" -k "Authorization: Basic TmFnaW9zV2luU3ZjUUEwNTp2UkZaWm4yRldUKw==" -H vip.example.com -u /20091101/products.svc -S --ssl=3
CRITICAL - Cannot make SSL connection.
140611372820416:error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c
The same setting works in 5.2.8 not in 5.4.7
Nagios XI Version : 5.4.7