HTTP Check für TLSV1.3

[cg1603 (Christian Gehrig)]

CMK version:
2.2.p18
OS version:

Error message:
140570331162432:error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error:ssl/record/rec_layer_s3.c:1562:SSL alert number 80

Hello forum,

A web server I monitor now only offers TLS V1.3

• TLSv1.3 (OUT), TLS handshake, client hello (1):
• TLSv1.3 (IN), TLS handshake, server hello (2):
• TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
• TLSv1.3 (IN), TLS handshake, Certificate (11):
• TLSv1.3 (IN), TLS handshake, CERT verify (15):
• TLSv1.3 (IN), TLS handshake, Finished (20):
• TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.3 (OUT), TLS handshake, Finished (20):
• SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256

I use the internal HTTP check from Checkmk

check_mk_active-http!–ssl -t 30 --sni -I xxx.xxx

and now I get this error message

140570331162432:error:14094438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error:ssl/record/rec_layer_s3.c:1562:SSL alert number 80

In the check I have “Use SSL with autonegotiation”

I also tried check_http with Nagios, that didn’t work either. What can I do?

[kdeutsch (Karl Deutsch)]

Hi @cg1603,
can you solve your issues with this plugin:

Releases · matteocorti/check_ssl_cert

matteocorti/check_ssl_cert/blob/master/README.md

Karl