CERTIFICATE_VERIFY_FAILED on HTTP_Check_Form_Submit

[Vuk (Marko Simović)]

Thank you for your thaughts and the effort tosch.

@tosch

@Vuk

* subjectAltName: host "www.xxx.nn" matched cert's "*.xxx.nn"

Does the certificate contain the IP of the host as SAN entry like IP:xxx.178.46.xxx? I guess there could be a problem regarding if the URL is called FQDN or via IP.
I assume the trailing : is just for the error message like “what i do: error message”.

To support my assumption, in your call via the check you submit the IP:

The ending collon (“:”) is displayed in the link in the GUI report too:

@Vuk

sudo /opt/omd/versions/2.0.0p22.cee/lib/nagios/plugins/check_form_submit -I xxx.178.46.xxx -u /login […]
GET https://xxx.178.46.xxx/login

and via curl you are connecting against the URL:

@Vuk

* Connected to www.xxx.nn(xxx.178.46.xxx) port 443 (#0)

[/quote]

If I try the check with URL - I get as follows:

Note the collon again at the end of the URL.

Or via CLI:

sudo /opt/omd/versions/2.0.0p22.cee/lib/nagios/plugins/check_form_submit -I xxx.nn -u /login -p 443 -e adresa -d
GET https://xxx.nn/login
CODE: 200 RESPONSE:
Traceback (most recent call last):
  File "/opt/omd/versions/2.0.0p22.cee/lib/nagios/plugins/check_form_submit", line 380, in <module>
    exitcode, info = main()
  File "/opt/omd/versions/2.0.0p22.cee/lib/nagios/plugins/check_form_submit", line 363, in main
    raise_host_state(client, base_url, uri, timeout, form_name, params, expect_regex)
  File "/opt/omd/versions/2.0.0p22.cee/lib/nagios/plugins/check_form_submit", line 228, in raise_host_state
    real_url, body = open_url(client, base_url + uri, timeout=timeout)
  File "/opt/omd/versions/2.0.0p22.cee/lib/nagios/plugins/check_form_submit", line 150, in open_url
    ['    %02d %s' % (index + 1, line) for index, line in enumerate(content.split('\n'))]))

TypeError: a bytes-like object is required, not 'str'

The TypeError I get - is the same as in GUI on later version (2.1). Hence I assumed that I must enter IP of the host for HTTP_check_form_submit, because it expect “bytes-like” data there and used the IP in all checks.