SSL Check Timeout

Hello Everyone!

We’ve been using check_mk for about 1.5 years. It’s awesome - thanks.

We set up some checks called ssl_domain.com
And these checks are set up like this:

  • Left hand menu, go to Check Plugins
  • Search for “check_http”
  • Click on “http/https connection”
  • Click on “Check HTTP service”
  • Click on “Create Rule in Folder”
  • Description and Name Field use “ssl_site.com”
    [X] “Check SSL Certificate Age”

It seems this check uses the default 10 seconds for a timeout. Unlike when you Make sure “Check the URL is submitted”, there is no option for changing the default timeout from 10 to something greater.

This is leading to false alarms for one older/legacy project we are trying to monitor ssl certificate expirations on.

Does anyone know of a way to change this? P.S. I believe in an older version of check_mk this screen was not split for the sslc hecks and the option to change the default timeout WAS available. It is my belief in an effort to streamline the screen, we lost usable functionality.

Thanks!

Hello,

you can try to use the rule “Service check timeout (Microcore)” to define a separate timeout for services that starts with HTTP. Didn’t try it myself with the certificate check. I only use it for other services.

@gero.eickmeyer for the life of me, I could not find this option anywhere. Where is it located?

If you use the RAW edition then you can only modify this setting on the command line in the Nagios core config. But this will not solve your problem as the core timeout for checks is 60 seconds.

With your problem you can do for a quick fix a “classic active passive check definition”
This should look like

$USER1$/check_http -C 30,7 --sni -t 30 ssl_domain.com

The -C defines when you want to get warning and critical for the cert age. The -t is the timeout parameter you wanted.

I forwarded this to feedback@checkmk.com since I have the same issue.

1 Like

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact @fayepal if you think this should be re-opened.