[Nagiosplug-help] check_http v1.4.14 - Cannot make SSL connection
Thomas Guyot-Sionnest
dermoth at aei.ca
Tue Apr 6 03:13:32 CEST 2010
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/04/10 05:20 PM, O'Brien, Kevin wrote:
> We're seeing similar issues. 1.4.14 check_http times out checking our Cisco SSL VPN but works fine in 1.4.13. It also works with the new version if we use the -N flag or omit -H.
>
> [user at localhost ~]$ ./nagios-plugins-1.4.13/plugins/check_http -H vpn.foo.com -I 10.0.0.2 -w 2 -c 5 -S
> HTTP OK - HTTP/1.0 302 Object Moved - 0.010 second response time |time=0.009734s;2.000000;5.000000;0.000000 size=289B;;;0
> [user at localhost ~]$ ./nagios-plugins-1.4.14/plugins/check_http -H vpn.foo.com -I 10.0.0.2 -w 2 -c 5 -S
> CRITICAL - Socket timeout after 10 seconds
> [user at localhost ~]$ ./nagios-plugins-1.4.14/plugins/check_http -H vpn.foo.com -I 10.0.0.2 -w 2 -c 5 -S -N
> HTTP OK: HTTP/1.0 302 Object Moved - 321 bytes in 0.009 second response time |time=0.009251s;2.000000;5.000000;0.000000 size=321B;;;0
> [user at localhost ~]$ ./nagios-plugins-1.4.14/plugins/check_http -I 10.0.0.2 -w 2 -c 5 -S
> HTTP OK: HTTP/1.0 302 Object Moved - 289 bytes in 0.009 second response time |time=0.009328s;2.000000;5.000000;0.000000 size=289B;;;0
>
This bug is well known and not having an external device to test with
was the biggest issue in fixing it. Fortunately I have a Cisco SSL VPN
to test with and it showed the same issue. The attached patch should fix it.
- --
Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFLuoq86dZ+Kt5BchYRAqC4AKDsga9UWLvYJSUEghBZEL359kgaqQCfVGd3
G/kbAaFxlHgYKHyI42y/HfE=
=OhnX
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fix-regression-in-check_http-ssl-checks-on-some-serv.patch
Type: text/x-patch
Size: 3072 bytes
Desc: not available
URL: <https://www.monitoring-plugins.org/archive/help/attachments/20100405/87f3ea49/attachment.bin>
More information about the Help
mailing list