check_http

Nagios Nagios Plugins support
1

Hi everybody,

Hop you can help me.

After upgrading to Ubuntu 10.10 I have one check_http that are failing.

No matter uf I run:
check_http --ssl -H $HOSTADDRESS$
check_http --ssl -I $HOSTADDRESS$
check_http --ssl -H $HOSTADDRESS$ -I $HOSTADDRESS$

The check will fail with following error:
*CRITICAL - Cannot make SSL connection
19186:error:140773F2:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert unexpected message:s23_clnt.c:602:
HTTP CRITICAL - Error on receive
*

Now someone would say the HTTPS on the server is not working but when the server is accessed by browser either IE, Chrome or even lynx (from the nagios server) hostaddress are working fine.

Because of the error I can’t check certificate lifetime, that will say anything doing to the SSL protocol only: “check_tcp -H $HOSTADDRESS$ -p 443”

Any one that have a suggestion to what I can do ?

/CO

2

i’d try recompiling the plugins… not sure if it can give this problem, but possibly some library changed in the upgrade…

3

I am using the default “aptitude install nagios-plugins”

4

that might make it quite complicated to recompile the plugins…

Did you try it from command line? as root?

PS: That’s not the default, that’s the “quick and easy” way (with all it’s problems) :slight_smile:
default would be: nagios.sourceforge.net/docs/3_0/ … buntu.html

5

[quote=“luca”]that might make it quite complicated to recompile the plugins…

Did you try it from command line? as root?

PS: That’s not the default, that’s the “quick and easy” way (with all it’s problems) :slight_smile:
default would be: nagios.sourceforge.net/docs/3_0/ … buntu.html[/quote]

I could try to remove the nagios-plugins and download the latest and compile that :slight_smile:

6

check for installation paths, defaults of the package and compiled version may (will?) be different :wink:
(use the ./configure command before compiling to change the destination).

7

[quote=“luca”]check for installation paths, defaults of the package and compiled version may (will?) be different :wink:
(use the ./configure command before compiling to change the destination).[/quote]

No diff. after I compile it by my self.

8

a couple fo searches brought me to this: bugs.debian.org/cgi-bin/bugreport.cgi?bug=514694

Looks like some openssl versions are bugged, might be worth trying to install a testing repository version…