[Check_mk (english)] monitor HTTPS

Hi!

We are having some trouble to monitor HTTPS enabled websites and have tried many different combinations of options to no avail. The error reported back is “ Cannot
make SSL connection” and nothing more.

Service check command
check_mk_active-http!’-H’ ‘host.domain.se’ ‘-u’ ‘/’ ‘–ssl’ ‘–sni’ ‘–onredirect=follow’ ‘-d’ ‘HTTP/1.1 200 OK’

We are running version 1.5.0p12 on a Debian 7.11 OS.

We hope you have any suggestions on how to resolve this issue and if you need more information just ask.

Best regards

Tony Bohlin

Direkt: 0470-77 99 91 • tony.bohlin@officeitpartner.se

image001.png
Office IT-Partner Växjö/Ljungby

Södra Vallviksvägen 8, 352 51 Växjö • 0470-77 99 99

Org.nr 556307–2627

www.officeitpartner.se/vaxjo

image002.pngimage003.pngimage004.pngimage005.pngimage006.png

Din integritet är viktig för oss. Läs vår integritetspolicy här.

image007.jpg

Hey Tony,

Did you select the option of “Use SSL/HTTPS for the connection”, If yes, which option have you selected in that ?

If no, please enable this option and check.

Thanks & Regards,

Praveen.

image001.png

image002.png

image003.png

image004.png

image005.png

image006.png

image007.jpg

···

On Wed, Apr 24, 2019 at 2:53 PM Tony Bohlin via checkmk-en checkmk-en@lists.mathias-kettner.de wrote:

Hi!

We are having some trouble to monitor HTTPS enabled websites and have tried many different combinations of options to no avail. The error reported back is “ Cannot
make SSL connection” and nothing more.

Service check command
check_mk_active-http!‘-H’ ‘host.domain.se’ ‘-u’ ‘/’ ‘–ssl’ ‘–sni’ ‘–onredirect=follow’ ‘-d’ ‘HTTP/1.1 200 OK’

We are running version 1.5.0p12 on a Debian 7.11 OS.

We hope you have any suggestions on how to resolve this issue and if you need more information just ask.

Best regards

Tony Bohlin

Direkt: 0470-77 99 91 • tony.bohlin@officeitpartner.se

Office IT-Partner Växjö/Ljungby

Södra Vallviksvägen 8, 352 51 Växjö • 0470-77 99 99

Org.nr 556307–2627

www.officeitpartner.se/vaxjo

Din integritet är viktig för oss. Läs vår integritetspolicy här.


checkmk-en mailing list

checkmk-en@lists.mathias-kettner.de

Manage your subscription or unsubscribe

https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

Hi Praveen,

I got it to work now if I don’t use redirect and instead use the redirected uri.

check_mk_active-http!‘-H’ ‘host.domain.se’ ‘-u’ ‘/login?ReturnUrl=/’ ‘–ssl’ ‘–sni’ ‘-e’ ‘HTTP/1.1 200 OK’

If I use redirect it follows the redirect to the first “301” but then errors at “302” where I should redirect and get “HTTP/1.1 200 OK”

Regards Tony

image001.png

image002.png

image003.png

image004.png

image005.png

image006.png

image007.jpg

···

Hey Tony,

Did you select the option of “Use SSL/HTTPS for the connection”, If yes, which option have you selected in that ?

If no, please enable this option and check.

Thanks & Regards,

Praveen.

On Wed, Apr 24, 2019 at 2:53 PM Tony Bohlin via checkmk-en checkmk-en@lists.mathias-kettner.de wrote:

Hi!

We are having some trouble to monitor HTTPS enabled websites and have tried many different combinations of options to no avail. The error reported back is “ Cannot
make SSL connection” and nothing more.

Service check command
check_mk_active-http!‘-H’ 'host.domain.se
‘-u’ ‘/’ ‘–ssl’ ‘–sni’ ‘–onredirect=follow’ ‘-d’ ‘HTTP/1.1 200 OK’

We are running version 1.5.0p12 on a Debian 7.11 OS.

We hope you have any suggestions on how to resolve this issue and if you need more information just ask.

Best regards

Tony Bohlin

Direkt: 0470-77 99 91 •
tony.bohlin@officeitpartner.se

Office IT-Partner Växjö/Ljungby

Södra Vallviksvägen 8, 352 51 Växjö • 0470-77 99 99

Org.nr 556307–2627

www.officeitpartner.se/vaxjo

* Din
integritet är viktig för oss. Läs vår integritetspolicy här.*


checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
Manage your subscription or unsubscribe
https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

Hi Tony,

which SSL/TLS version do your https sites use? It may be this version is not supported in Debian7 - and because if that those are also not supported in CMK at Debian7.

You could test this at a Debian9 system by installing CMK there and just configure one of the failing hosts with the HTTP check…

HTH,

Marcel

image002.png

···

Tony Bohlin via checkmk-en checkmk-en@lists.mathias-kettner.de schrieb am Mi., 24. Apr. 2019, 14:53:

Hi!

We are having some trouble to monitor HTTPS enabled websites and have tried many different combinations of options to no avail. The error reported back is “ Cannot
make SSL connection” and nothing more.

Service check command
check_mk_active-http!‘-H’ ‘host.domain.se’ ‘-u’ ‘/’ ‘–ssl’ ‘–sni’ ‘–onredirect=follow’ ‘-d’ ‘HTTP/1.1 200 OK’

We are running version 1.5.0p12 on a Debian 7.11 OS.

We hope you have any suggestions on how to resolve this issue and if you need more information just ask.

Best regards

Tony Bohlin

Direkt: 0470-77 99 91 • tony.bohlin@officeitpartner.se

cid:image001.png@01D3F69A.C91CA310

Office IT-Partner Växjö/Ljungby

Södra Vallviksvägen 8, 352 51 Växjö • 0470-77 99 99

Org.nr 556307–2627

www.officeitpartner.se/vaxjo

cid:image004.png@01D4566B.C37B63C0cid:image006.png@01D4566B.C37B63C0cid:image008.png@01D4566B.C37B63C0cid:image010.png@01D4566B.C37B63C0cid:image012.png@01D4566B.C37B63C0

Din integritet är viktig för oss. Läs vår integritetspolicy här.

cid:image007.jpg@01D492C3.2C3CFF20


checkmk-en mailing list

checkmk-en@lists.mathias-kettner.de

Manage your subscription or unsubscribe

https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

Hi Marcel,

I managed to get it to work, if i leave the redirect out , and set the uri to the last address in the redirect chain.

check_mk_active-http!‘-H’ ‘host.domain.se’ ‘-u’ ‘/login?ReturnUrl=/’ ‘–ssl’ ‘–sni’ ‘-e’ ‘HTTP/1.1 200 OK’‘HTTP/1.1
200 OK’

The redirect goes like this
http://host.domain.se >
301 (Moved Permanently) >
https://host.domain.se
> 302 (found) >
https://host.domain.se/login?ReturnUrl=/
and I get error
“Invalid HTTP response received from host on port 443: HTTP/1.1 302 Found”

Regards

Tony

···

Hi Tony,

which SSL/TLS version do your https sites use? It may be this version is not supported in Debian7 - and because if that those are also not supported in CMK at Debian7.

You could test this at a Debian9 system by installing CMK there and just configure one of the failing hosts with the HTTP check…

HTH,

Marcel

Tony Bohlin via checkmk-en checkmk-en@lists.mathias-kettner.de schrieb am Mi., 24. Apr. 2019, 14:53:

Hi!

We are having some trouble to monitor HTTPS enabled websites and have tried many different combinations of options to no avail. The error reported back is “ Cannot
make SSL connection” and nothing more.

Service check command
check_mk_active-http!‘-H’ 'host.domain.se
‘-u’ ‘/’ ‘–ssl’ ‘–sni’ ‘–onredirect=follow’ ‘-d’ ‘HTTP/1.1 200 OK’

We are running version 1.5.0p12 on a Debian 7.11 OS.

We hope you have any suggestions on how to resolve this issue and if you need more information just ask.

Best regards

Tony Bohlin

Direkt: 0470-77 99 91 •
tony.bohlin@officeitpartner.se

Office IT-Partner Växjö/Ljungby

Södra Vallviksvägen 8, 352 51 Växjö • 0470-77 99 99

Org.nr 556307–2627

www.officeitpartner.se/vaxjo

* Din
integritet är viktig för oss. Läs vår integritetspolicy här.*


checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
Manage your subscription or unsubscribe
https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

Okay, unexpected, but if this works…

We don’t have our hands on this check_http, it’s taken from monitoring-plugins.org

BR,

Marcel

···

Tony Bohlin tony.bohlin@officeitpartner.se schrieb am Mi., 24. Apr. 2019, 18:12:

Hi Marcel,

I managed to get it to work, if i leave the redirect out , and set the uri to the last address in the redirect chain.

check_mk_active-http!‘-H’ 'host.domain.se ’ ‘-u’ ‘/login?ReturnUrl=/’ ‘–ssl’ ‘–sni’ ‘-e’ ‘HTTP/1.1 200 OK’‘HTTP/1.1
200 OK’

The redirect goes like this
http://host.domain.se >
301 (Moved Permanently) >
https://host.domain.se
> 302 (found) >
https://host.domain.se/login?ReturnUrl=/
and I get error
“Invalid HTTP response received from host on port 443: HTTP/1.1 302 Found”

Regards

Tony

From: Marcel Schulte schulte.marcel@gmail.com
Sent: den 24 april 2019 17:19
To: Tony Bohlin tony.bohlin@officeitpartner.se
Cc: checkmk-en@lists.mathias-kettner.de checkmk-en@lists.mathias-kettner.de
Subject: Re: [Check_mk (english)] monitor HTTPS

Hi Tony,

which SSL/TLS version do your https sites use? It may be this version is not supported in Debian7 - and because if that those are also not supported in CMK at Debian7.

You could test this at a Debian9 system by installing CMK there and just configure one of the failing hosts with the HTTP check…

HTH,

Marcel

Tony Bohlin via checkmk-en checkmk-en@lists.mathias-kettner.de schrieb am Mi., 24. Apr. 2019, 14:53:

Hi!

We are having some trouble to monitor HTTPS enabled websites and have tried many different combinations of options to no avail. The error reported back is “ Cannot
make SSL connection” and nothing more.

Service check command
check_mk_active-http!‘-H’ 'host.domain.se
‘-u’ ‘/’ ‘–ssl’ ‘–sni’ ‘–onredirect=follow’ ‘-d’ ‘HTTP/1.1 200 OK’

We are running version 1.5.0p12 on a Debian 7.11 OS.

We hope you have any suggestions on how to resolve this issue and if you need more information just ask.

Best regards

Tony Bohlin

Direkt: 0470-77 99 91 •
tony.bohlin@officeitpartner.se

Office IT-Partner Växjö/Ljungby

Södra Vallviksvägen 8, 352 51 Växjö • 0470-77 99 99

Org.nr 556307–2627

www.officeitpartner.se/vaxjo

* Din
integritet är viktig för oss. Läs vår integritetspolicy här.*


checkmk-en mailing list
checkmk-en@lists.mathias-kettner.de
Manage your subscription or unsubscribe
https://lists.mathias-kettner.de/cgi-bin/mailman/listinfo/checkmk-en

Hi

Why are you using -e option of check_http here ?
I think you can't use -e and --onredirect together
Use -s (string) or -r (regex) instead if you want to check content.

Try check_http --help.

Regards

···

--
Stéphane

Le 24/04/2019 à 16:17, Tony Bohlin via checkmk-en a écrit :

Hi Praveen,

I got it to work now if I don’t use redirect and instead use the redirected uri.

check_mk_active-http!'-H' 'host.domain.se' '-u' '/login?ReturnUrl=/' '--ssl' '--sni' '-e' 'HTTP/1.1 200 OK'

If I use redirect it follows the redirect to the first “301” but then errors at “302” where I should redirect and get “HTTP/1.1 200 OK”

Regards Tony

*From:*Praveen Kumar Velpula <praveen.velpula@gmail.com>
*Sent:* den 24 april 2019 15:15
*To:* Tony Bohlin <tony.bohlin@officeitpartner.se>
*Cc:* checkmk-en@lists.mathias-kettner.de
*Subject:* Re: [Check_mk (english)] monitor HTTPS

Hey Tony,

Did you select the option of "Use SSL/HTTPS for the connection", If yes, which option have you selected in that ?

If no, please enable this option and check.

Thanks & Regards,

Praveen.

On Wed, Apr 24, 2019 at 2:53 PM Tony Bohlin via checkmk-en <checkmk-en@lists.mathias-kettner.de <mailto:checkmk-en@lists.mathias-kettner.de>> wrote:

    Hi!

    We are having some trouble to monitor HTTPS enabled websites and have tried many different combinations of options to no avail. The error reported back is “Cannot make SSL connection” and nothing more.

    Service check command check_mk_active-http!'-H' 'host.domain.se <https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fhost.domain.se&data=02|01|tony.bohlin%40officeitpartner.se|b8ba1034a260411e387d08d6c8b6d1d5|bf98cdd615494b42a71580afda28432f|0|0|636917084871852156&sdata=mZsRxeBMERan7LFG%2F%2F1yggfBftF1aFNGXZJTeKsYXxo%3D&reserved=0&gt;&#39; '-u' '/' '--ssl' '--sni' '--onredirect=follow' '-d' 'HTTP/1.1 200 OK'

    We are running version 1.5.0p12 on a Debian 7.11 OS.

    We hope you have any suggestions on how to resolve this issue and if you need more information just ask.

    *Best regards*

    *Tony Bohlin*