Monitoring HTTPS

[C. Bensend]

> When the certificate of 'www.verisign.com' is valid for more than 14
> days, a STATE_OK is returned. When the certificate is still valid, but for
> less than 14 days, a STATE_WARNING is returned. A STATE_CRITICAL will be
> returned when the certificate is expired.
>
> xxxx:/usr/local/src/nagios-plugins-1.4.2/plugins# ./check_http
> www.verisign.com -C 14
> HTTP OK HTTP/1.1 200 OK - 29788 bytes in 1.565 seconds
> |time=1.564926s;;;0.000000 size=29788B;;;0
> xxxx:/usr/local/src/nagios-plugins-1.4.2/plugins# ./check_http
> www.verisign.com -C 0
> HTTP OK HTTP/1.1 200 OK - 29788 bytes in 0.897 seconds
> |time=0.896714s;;;0.000000 size=29788B;;;0
> xxxx:/usr/local/src/nagios-plugins-1.4.2/plugins# ./check_http
> www.verisign.com -C 10000
> HTTP OK HTTP/1.1 200 OK - 29788 bytes in 0.895 seconds
> |time=0.895433s;;;0.000000 size=29788B;;;0
> xxxx:/usr/local/src/nagios-plugins-1.4.2/plugins# ./check_http
> www.verisign.com -C 1000000
> HTTP OK HTTP/1.1 200 OK - 29788 bytes in 0.898 seconds
> |time=0.897858s;;;0.000000 size=29788B;;;0
> xxxx:/usr/local/src/nagios-plugins-1.4.2/plugins# ./check_http
> secure.friendscout24.de -C 1000
> HTTP OK HTTP/1.1 200 OK - 47462 bytes in 0.043 seconds
> |time=0.043246s;;;0.000000 size=47462B;;;0
> xxxx:/usr/local/src/nagios-plugins-1.4.2/plugins# ./check_http
> secure.friendscout24.de -C 100000000
> HTTP OK HTTP/1.1 200 OK - 47462 bytes in 0.036 seconds
> |time=0.036184s;;;0.000000 size=47462B;;;0
> xxxx:/usr/local/src/nagios-plugins-1.4.2/plugins# ldd check_http
>         libnsl.so.1 => /lib/tls/libnsl.so.1 (0x4001c000)
>         libresolv.so.2 => /lib/tls/libresolv.so.2 (0x40030000)
>         libssl.so.0.9.7 => /usr/lib/i686/cmov/libssl.so.0.9.7 (0x40043000)
>         libcrypto.so.0.9.7 => /usr/lib/i686/cmov/libcrypto.so.0.9.7
> (0x40074000)
>         libc.so.6 => /lib/tls/libc.so.6 (0x40173000)
>         libdl.so.2 => /lib/tls/libdl.so.2 (0x402a8000)
>         /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
>
> Am i missing something? Or does verisign believe that they will live
> forever?

You're not testing SSL (missing the -S switch).  Here is my
check_cert definition:

define command{
        command_name    check_cert
        command_line    $USER1$/check_http -S -H $ARG1$ -C 7 -t 20
        }

Note you'll have to follow the previous instructions to get SSL
support first.


-- 
"God help us all if cats had thumbs."     -- Me, 2006



-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null