Nagios Support Forum

Hi Team,

We have Nagios XI version 5.8.1 and we have deployed the NCPA agent version 2.3.1 via "deploy agent" function to one of the Redhat enterprise Linux server, the installation went fine and server got configured as well but as per the security scan we see that there are some vulnerability related to the SSL certificates. i.e ssl cert cannot be trusted.

I Have attached the screenshot name to the post.

NCPA by default generates its own SSL certificate. Also, Nagios by default allows this because the SSL certificate used by NCPA needs to be flexible enough not to require a DNS name for the NCPA listener process. This means that unless your NCPA listener server is hosting a domain the SSL cert used by NCPA won't and can't ever be a "trusted" cert. Trusted certs are for DNS domains, not ad-hoc servers.

If you want to use a cert issued by a CA, you can. It goes into the NCPA configuration. See here for details about configuring NCPA to use a custom cert.