HTTP/SSL/Proxy

Rob Moss robmossrm at aol.com
Wed Oct 19 17:04:17 CEST 2005 

Marc Powell wrote:

>  
>
>>-----Original Message-----
>>From: nagios-users-admin at lists.sourceforge.net [mailto:nagios-users-
>>admin at lists.sourceforge.net] On Behalf Of G Davies
>>Sent: Wednesday, October 19, 2005 6:55 AM
>>To: nagios-users at lists.sourceforge.net
>>Subject: [Nagios-users] HTTP/SSL/Proxy
>>
>>Ok, my next challenge is to check an external SSL site using Nagios.
>>I'm sat behind an MS proxy that requries NTLM authentication but I
>>have an NTMLAPS proxy on the network so that's not a problem (saw a
>>question about this in the archives by the way, if whoever posted it
>>is reading this then NTLMAPS is your friend :)).  Getting the SSL page
>>is an issue though.  I can get the page from the command line using
>>curl but wget is showing <HTML></HTML> as the entire body.  check_http
>>shows the same as wget so really I have 2 questions.
>>
>>1.  Does anyone recognise this and know how I can make it work?
>>    
>>
>
>check_http won't work for you in this situation. In order to tunnel the
>SSL connection through the proxy, check_http would need to know that it
>was using a proxy and to issue the CONNECT command to initiate the SSL
>connection to the remote host. That functionality doesn't exist, at
>least in nagios-plugins-1.4.1 as far as I can tell.
>
>  
>
>>2.  If the answer to 1 is no, is there a curl wrapper already out
>>there I can adapt to save me rolling my own.
>>    
>>
>
>http://64.233.187.104/search?q=cache:9MLnLj8xHPMJ:sentinix.tigerteam.se/
>todo.shtml+nagios+curl+wrapper&hl=en&client=firefox-a
>
>The above implies that there was one created for Sentinix but it doesn't
>seem to be generally available, nor is it clear that it has the
>functionality you want. It should be pretty straightforward to create
>one though using the 'Plugin Output for Nagios' guidelines at
>
>http://nagiosplug.sourceforge.net/developer-guidelines.html#PLUGOUTPUT
>  
>

Here's a copy of my check_https.pl script (it's not online anywhere), 
which will allow you to use a proxy server (and authentication).

It's written in Perl and uses the LWP module which is quite extensible.

You will need to update the script in order for it to work through your 
proxy

Cheers
rob.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: check_https.pl
URL: <https://www.monitoring-lists.org/archive/users/attachments/20051019/771e0858/attachment.pl>

More information about the Users mailing list