Hi Scott-
Lundgren, Scott wrote:
Do you know why the browser is prompting about the certificate when you
access the URL through your browser? Does the certificate match or is it
expired?
It's prompting in firefox/IE because it's an unknown certificate
authority.
you may have to look through the source of the check_http plug-in and to
see how it handles SSL certificate negotiation. On one hand it could
blindly trust any certificate. On the other hand like a browser the
plugin could consult some file for manually accepted & stored
certificates or simply exit if the certificate doesn't is
expired/doesn't match.
I did look through the source of check_http, and also
check_http-with-client-certificate.c, however I'm not familiar
enough with C to know how to get what I want out of it :)
I'd be happy if I could get it to blindly accept the certificate.
Anybody have some quick thoughts as to where in the code I should look
to make this kind of change?
Thanks!
Scott Lundgren
ITS - Web Services
UNC at Charlotte
http://www.uncc.edu
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott
McCamish (Contractor)
Sent: Tuesday, May 30, 2006 2:40 PM
To: [email protected]
Subject: [Nagios-users] check_http ssl certificate
Hi all-
A web server was recently upgraded, and my check_http --ssl service is
now failing.
The server is sending a certificate when accessing through a browser.
How can I
accept the certificate; either permanently through the nagios user cmd
line, or through flags to check_http?
'check_http --ssl H xyzxyz -C 14' works fine to see the expiration...
I did read a recent thread that suggested the servers http config be
changed, but I don't have access/approval to change the server config.
Thanks for reading!
Nagios 1.2 (I'll be upgrading soon)
$ ./check_http -H xyzxyz --ssl -f=follow -v GET / HTTP/1.0
User-Agent: check_http/1.89 (nagios-plugins 1.4.3)
Host: xyzxyz
No data received
$
begin:vcard
fn:Scott McCamish
n:McCamish;Scott
org:USNA;ITSD
adr:181 Wainwright Road;;Halligan Hall;Annapolis;MD;21402;USA
email;internet:[EMAIL PROTECTED]
title:Network Engineer
tel;work:410 293-3896
tel;fax:410 293-3898
tel;cell:443 871-1402
version:2.1
end:vcard
_______________________________________________
Nagios-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue.
::: Messages without supporting info will risk being sent to /dev/null
