Using check_http for https

Gereon Kremer gereon.kremer at cs.rwth-aachen.de
Mon Jan 4 15:03:53 CET 2016


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


Hello,

I'm using nagios for website monitoring and recently one of the sites
was migrated to https.
I'll abstract from the nagios config now and directly show the problem
on the plugin.

I now want to migrate the following command to https:
check_http -H <url>

What works:
wget https://<url>

What does not work (with result):
check_http -S -H <url>   (timeout)
check_http --ssl -H <url>   (timeout)
check_http --ssl=1 -H <url>   (timeout)
check_http --ssl=2 -H <url>   (SSL protocol version 2 is not supported
by your SSL library.)
check_http --ssl=3 -H <url>   (sslv3 alert handshake
failure:s3_pkt.c:1294:SSL alert number 40)
check_http -p 443 -H <url>   (timeout)

I also tried to enable sni or additionally provide the IP via -I, but
this did not change anything.
I discovered the third-party check_https plugin which actually wraps
wget. However, I'd like to use the -s option from check_http which is
not provided by check_https.

The version:
$ check_http --version
check_http v2.1.1 (monitoring-plugins 2.1.1)

The tests were executed on a debian server as root (I know that I should
not run nagios as root, but for testing this issue it seemed appropriate
.)

Best,
Gereon

- -- 
Gereon Kremer
Lehr- und Forschungsgebiet Theorie Hybrider Systeme
RWTH Aachen
Tel: +49 241 80 21243
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJWinvHAAoJEIQ2nMX673Hf9g8IAI9XHrcsvADAqngEeXkYEeJO
a+K8P3CK23Ft/V6num7Mg0DO0uMdPoGFKamaaVSR4Biq29INyYmx9wgMCgkQ5b3o
c7O/CZbSG9GlZ327WUJQWo05DR4z7ctRJD83IhAIBw/IOt3mb/nUih06Bb8xFUxi
f2Om8gSsD0yX7zWhcC2f+J8K8XG9AmacDqJFcMdptlHmdWbVRvkcVrJG+pJn6qXv
UdH2D7/fPELjy1MfUx6tanUEl2FbvrWXIVzxOAClihsiDuDGAdwkRJz/837WWKqw
im8p7L+4QHyRZzFIREf8rXuLeq7bJvMNjFeJ/BlD8g+0uvBC/W+OdkswHNBFmTw=
=mDIK
-----END PGP SIGNATURE-----



More information about the Devel mailing list