Windows Version of check_http with SSL support

[Andreas Ericsson]

Mohr James wrote:
> Hi All!
> 
> I downloaded CygwinPlugins1-3-1.zip from the Nagios Exchange and am
> having problems with "check_http.exe --ssl". 
> 
> We need to start check_http on a Windows 2000 machine in order to check
> specific URLs on the Internet because the Nagios server is not connected
> to the Internet, nor will it ever be allowed to be. I have suggested
> using a Linux machine to connect to the Internet, but this was blocked
> by my boss, so we have to use a Windows machine.
> 

It always amazes me that the super-incompetent are allowed to keep their 
jobs and that they nearly always get better pay than those who actually 
know what their doing.

> We set up a new check command check_http_over_nrpe which connects to the
> windows machine via NRPE and then starts check_http.exe. This works fine
> until we want to use the --ssl/-S option. NRPE reports a timeout and
> when I run check_http.exe on the Windows machine locally I get this
> message:
> 
>     595 [main] check_http 2448 handle_exceptions: Exception:
> STATUS_ACCESS_VIOLATION
>    4167 [main] check_http 2448 open_stackdumpfile: Dumping stack trace
> to check_http.exe.stackdump
> 

I think (but I'm not sure) that you can get this problem if the cygwin's 
openssl libraries are of a different version than the ones that the 
program in question was compiled with. Trust Windows to not use 
versioned symbols (that's the reason why service-packs are always 
several hundred megabytes large).

> The dump file contains this:
> 
> Exception: STATUS_ACCESS_VIOLATION at eip=61040847
> eax=50545448 ebx=00008708 ecx=100FCBA0 edx=312E312F esi=10100AA0
> edi=101052A8
> ebp=0022FD58 esp=0022FD40
> program=C:\usr\local\nagios\libexec\check_http.exe
> cs=001B ds=0023 es=0023 fs=0038 gs=0000 ss=0023
> Stack trace:
> Frame     Function  Args
> 0022FD58  61040847  (0000000A, 0000000C, 00342D3B, 00000580)
> 0022FD88  610412D6  (10100AA0, 00003E79, 0022FDF8, 00343AC6)
> 0022FDF8  1000208B  (0022FE4C, 00402087, 10127F98, 0040C4A0)
> 0022FE68  00402AFA  (0040C490, 00000000, 004010A0, 0022FEC3)
> 0022FE90  00401272  (00000006, 100F0458, 100F0328, 00000001)
> 0022FF40  61007408  (610D1F58, FFFFFFFE, 000003D8, 610D1E7C)
> 0022FF90  610076ED  (00000000, 00000000, 8043138F, 00000000)
> 0022FFB0  00408A42  (004011A0, 037F0009, 0022FFF0, 77E987E7)
> 0022FFC0  0040103C  (00000000, 00000000, 7FFDF000, 00000000)
> 0022FFF0  77E987E7  (00401000, 00000000, 000000C8, 00000100)
> End of stack trace
> 

A stack trace is only useful if its symbols are resolved. These numbers 
can mean just about anything and are highly dependent on where, exactly, 
in memory your program and the various libraries are loaded.

> I tested it by leaving off the -u (for the URL) and the command returns
> successfully, but I get the same "Forbidden" error as when I connect
> normally via a browser. If try "-u /index.html" check_http.exe gives me
> "NOT FOUND", like the browser. Whenever I try a known file, I get this
> error. I have tried multiple site (including verisign.com) and I get the
> same error message. 
> 
> All of this tells me that problem does not lie within the mechanism of
> using NRPE to execute the command, but rather in trying to use SSL with
> check_http.exe.
> 

Sane conclusion.

> I also looked at the nagiosplug Project on SourceForge. In the "Nagios
> Plugins README" it says:
> 
> The win32 subdir contains plugins specific to the Win32 platform. 
>   These are scripts or binaries.
> 
> However, I do not find a directory named "win32". The next logical step
> would be to try to compile it with cygwin on Windows, but I would like
> to know if anyone has a solution before I take that step.
> 

You'll most likely run into similar (or the same) problem unless you 
compile them yourself (that is, if it is indeed a library version 
mismatch as I suspect).

-- 
Andreas Ericsson                   andreas.ericsson at op5.se
OP5 AB                             www.op5.se
Tel: +46 8-230225                  Fax: +46 8-230231


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null