Page 1 of 1
Website Wizard: Cannot make SSL connection.
Posted: Mon May 17, 2021 12:07 pm
by TBT
Using the Website Wizard to monitor a SSL Certificate, the check is returning: Critical CRITICAL - Cannot make SSL connection.
1. Manual check also fails
./check_http -H <server> -C 30,7 -p 443
CRITICAL - Cannot make SSL connection.
2. Browsing with both Firefox and Chrome to the URL works with no cert errors.
Any suggestions?
Re: Website Wizard: Cannot make SSL connection.
Posted: Tue May 18, 2021 1:24 pm
by benjaminsmith
Hi,
Let's add the
-v flag to the command line for verbose output to help troubleshoot the error. Please run the following and post the full output from the check command.
Code: Select all
./check_http -H <server> -C 30,7 -p 44 -v
Also, please try the following version and post the full output as well. Thanks! Benjamin
Code: Select all
./check_http -H <server> -C 30,7 -p 44 --sni -v
Re: Website Wizard: Cannot make SSL connection.
Posted: Tue May 18, 2021 1:43 pm
by TBT
Assuming you meant 443, here are the results:
Code: Select all
./check_http -H <server> -C 30,7 -p 443 -v
CRITICAL - Cannot make SSL connection.
SSL initialized
Code: Select all
./check_http -H <server> -C 30,7 -p 443 --sni -v
SSL initialized
SSL OK - Certificate '<server>' will expire on 2022-04-27 19:59 -0400/EDT.
Re: Website Wizard: Cannot make SSL connection.
Posted: Tue May 18, 2021 4:40 pm
by benjaminsmith
Hi,
Thanks for testing that.. Looks like adding the --sni option works.
--sni
Enable SSL/TLS hostname extension support (SNI)
https://www.monitoring-plugins.org/doc/ ... _http.html
Re: Website Wizard: Cannot make SSL connection.
Posted: Wed May 19, 2021 12:50 pm
by TBT
Ah yes, this bit me once before! Issue resolved with Server Name Indication (SNI) flag.
Re: Website Wizard: Cannot make SSL connection.
Posted: Wed May 19, 2021 4:14 pm
by benjaminsmith
Hi
@TBT,
Excellent! We'll mark this as resolved. Feel free to open a new post if you have any new questions.
Benjamin