ssl

[andy proctor]

I have some bizzare behaviour with one host which I am trying to monitor.

I have the 1.3.1 plugin's which I build using on Solaris 7 using gcc 2.95.3 
/ make 3.80:

./configure --prefix=/usr/local/nagios-1.1 --with-cgiurl=/nagios/cgi-bin 
--with-nagios-user=nagios --with-nagios-group=nagios 
--with-openssl=/usr/local/ssl

The version of openssl is 0.9.7c (and I have also tried with 0.9.7b with the 
same results)

I am trying to check an SSL server running a wildcard certificate 
*.domain.com which I thought may have been the cause of my problems. 
However, I can check SSL sites such as www.verisign.com and www.geotrust.com 
(who supplied ours) fine, although these are single host certificates.

Our main server which runs our sites and virtual hosts works fine with SSL 
(on apache 1.3.28+modssl 2.8.14 / Solaris 9) to all browsers however 
obscure, however to check_http you always get the following (with check_http 
IP address -C 14 -S -v):

SSL seeding: OK
ERROR: Cannot retrieve server certificate.

I have checked from an external address and it fails the same, it also does 
this on different hosts on different operating systems when checking this 
host.

The reason that I also think that this now isn't the server certificate is 
we use this certificate on another host which runs apache under Unixware 7 
(yuk!) but this works fine with check_http - which presumably also indicates 
that the plug in has worked fine.

Any ideas? Is this looking like a bug that needs fixing? I'd appreciate some 
feedback and also can give the domain name to one of the authours if you 
would like to check it out at all. I've trussed it too, but it doesn't 
really mean anything to me but if someone wants to see the out put I'll post 
it.



Regards,
Andy Proctor
andyjproctor at hotmail.com

_________________________________________________________________
Express yourself with cool new emoticons http://www.msn.co.uk/specials/myemo



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null