Page 1 of 1

Trouble with check_http plugin

Posted: Fri Mar 23, 2018 10:01 am
by RyanMule
Hello All,

I am having a issue using the check_http plugin in my environment. I am using to monitor the expiration date of certificates. The check seems to be working correctly however is keeps pointing to older certs. My question is how do I point it to the correct cert?

This is the command I am using

$USER1$/check_http -H $HOSTADDRESS$ -C $ARG1$
$ARG1$ = 30,7

Thank you!

Re: Trouble with check_http plugin

Posted: Fri Mar 23, 2018 12:58 pm
by kyang
Could you try adding the --sni flag when running that command?

Code: Select all

/usr/local/nagios/libexec/check_http -H <hostIP> -C 30,7 --sni

Re: Trouble with check_http plugin

Posted: Fri Mar 23, 2018 2:11 pm
by RyanMule
Tried adding the --sni flag and receive: CRITICAL - Cannot make SSL connection.

Thank you

Re: Trouble with check_http plugin

Posted: Fri Mar 23, 2018 2:54 pm
by kyang
Which cert are you checking for? SSL?

You could use openssl to verify what certs are on the host you are checking for.

Code: Select all

openssl s_client -showcerts -connect IP:Port