<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style></style></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1>That was it – thanks!<o:p></o:p><o:p> </o:p>Frank<o:p></o:p><o:p> </o:p>From: Travis Runyard [mailto:travisrunyard@gmail.com] Sent: Thursday, January 31, 2013 11:07 PM To: Nagios Users List Subject: Re: [Nagios-users] check_http fails on Cisco ASA<o:p></o:p><o:p> </o:p><div>Have you tried check_http -I <ip> -S<o:p></o:p><div>The -H is for hostnames<o:p></o:p></div></div><div><o:p> </o:p><div>On Thu, Jan 31, 2013 at 8:35 PM, Frank Bulk <<a href="mailto:frnkblk@iname.com" target="_blank">frnkblk@iname.com</a>> wrote:<o:p></o:p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'>Does anyone have check_http working against the SSL VPN GUI interface of a Cisco ASA? Whenever I check it always closes, but wget and curl work fine: ===================================================== nagios:/usr/lib/nagios/plugins# ./check_http -H <ip> -S -v GET / HTTP/1.1 User-Agent: check_http/v1.4.15 (nagios-plugins 1.4.15) Connection: close Host: <ip> CRITICAL - Socket timeout after 10 seconds nagios:/usr/lib/nagios/plugins# ===================================================== nagios:/usr/lib/nagios/plugins# wget <a href="https://%3cip">https://<ip</a>> --no-check-certificate --2013-01-31 22:31:39-- <a href="https://%3cip%3e/">https://<ip>/</a> Connecting to <ip>:443... connected. WARNING: cannot verify <ip>ās certificate, issued by ā/CN=<host>/unstructuredName=<host>ā Self-signed certificate encountered. WARNING: certificate common name ā<host>ā<ip>ā HTTP request sent, awaiting response... 302 Object Moved Location: /+CSCOE+/logon.html [following] --2013-01-31 22:31:39-- <a href="https://%3cip%3e/+CSCOE+/logon.html">https://<ip>/+CSCOE+/logon.html</a> Connecting to <ip>:443... connected. WARNING: cannot verify <ip>ās certificate, issued by ā/CN=<host>/unstructuredName=<host>ā Self-signed certificate encountered. WARNING: certificate common name ā<host>ā<ip>ā HTTP request sent, awaiting response... 200 OK Length: unspecified [text/html] Saving to: āindex.htmlā [ <=> ] 4,514 --.-K/s in 0.03s 2013-01-31 22:31:39 (158 KB/s) - āindex.htmlā nagios:/usr/lib/nagios/plugins# ===================================================== nagios:/usr/lib/nagios/plugins# curl <a href="https://%3cip">https://<ip</a>> --insecure -v * About to connect() to <ip> port 443 (#0) * Trying <ip>... connected * Connected to <ip> (<ip>) port 443 (#0) * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, CERT (11): * SSLv3, TLS handshake, Server finished (14): * SSLv3, TLS handshake, Client key exchange (16): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSL connection using RC4-SHA * Server certificate: * subject: CN=<host>; unstructuredName=<host> * start date: 2010-02-03 00:10:30 GMT * expire date: 2020-02-01 00:10:30 GMT * common name: <host> (does not match '<ip>') * issuer: CN=<host>; unstructuredName=<host> * SSL certificate verify result: self signed certificate (18), continuing anyway. > GET / HTTP/1.1 > User-Agent: curl/7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/<a href="http://1.2.3.4" target="_blank">1.2.3.4</a> libidn/1.15 libssh2/1.2.5 > Host: <ip> > Accept: */* > * HTTP 1.0, assume close after body < HTTP/1.0 302 Object Moved < Server: Cisco AWARE 2.0 < Fri, 01 Feb 2013 04:07:54 GMT < Location: /+CSCOE+/logon.html < Set-Cookie: tg=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/ < Content-Type: text/html; charset=UTF-8 < Transfer-Encoding: chunked < Cache-Control: no-cache < Pragma: no-cache * HTTP/1.0 connection set to keep alive! < Connection: Keep-Alive < Date: * Connection #0 to host <ip> left intact * Closing connection #0 * SSLv3, TLS alert, Client hello (1): nagios:/usr/lib/nagios/plugins# ===================================================== ------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: <a href="http://p.sf.net/sfu/appdyn_d2d_jan" target="_blank">http://p.sf.net/sfu/appdyn_d2d_jan</a> _______________________________________________ Nagios-users mailing list <a href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null<o:p></o:p></blockquote></div><o:p> </o:p></div></div></body></html>