<div dir="ltr">Have you tried check_http -I <ip> -S<div style>The -H is for hostnames</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jan 31, 2013 at 8:35 PM, Frank Bulk <span dir="ltr"><<a href="mailto:frnkblk@iname.com" target="_blank">frnkblk@iname.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Does anyone have check_http working against the SSL VPN GUI interface of a<br>
Cisco ASA?<br>
<br>
Whenever I check it always closes, but wget and curl work fine:<br>
=====================================================<br>
nagios:/usr/lib/nagios/plugins# ./check_http -H <ip> -S -v<br>
GET / HTTP/1.1<br>
User-Agent: check_http/v1.4.15 (nagios-plugins 1.4.15)<br>
Connection: close<br>
Host: <ip><br>
<br>
<br>
CRITICAL - Socket timeout after 10 seconds<br>
nagios:/usr/lib/nagios/plugins#<br>
=====================================================<br>
nagios:/usr/lib/nagios/plugins# wget https://<ip> --no-check-certificate<br>
--2013-01-31 22:31:39-- https://<ip>/<br>
Connecting to <ip>:443... connected.<br>
WARNING: cannot verify <ip>âs certificate, issued by<br>
â/CN=<host>/unstructuredName=<host>â<br>
<br>
Self-signed certificate encountered.<br>
WARNING: certificate common name â<host>â<ip>â<br>
<br>
HTTP request sent, awaiting response... 302 Object Moved<br>
Location: /+CSCOE+/logon.html [following]<br>
--2013-01-31 22:31:39-- https://<ip>/+CSCOE+/logon.html<br>
Connecting to <ip>:443... connected.<br>
WARNING: cannot verify <ip>âs certificate, issued by<br>
â/CN=<host>/unstructuredName=<host>â<br>
<br>
Self-signed certificate encountered.<br>
WARNING: certificate common name â<host>â<ip>â<br>
<br>
HTTP request sent, awaiting response... 200 OK<br>
Length: unspecified [text/html]<br>
Saving to: âindex.htmlâ<br>
<br>
[ <=><br>
] 4,514 --.-K/s in 0.03s<br>
<br>
2013-01-31 22:31:39 (158 KB/s) - âindex.htmlâ<br>
<br>
nagios:/usr/lib/nagios/plugins#<br>
=====================================================<br>
nagios:/usr/lib/nagios/plugins# curl https://<ip> --insecure -v<br>
* About to connect() to <ip> port 443 (#0)<br>
* Trying <ip>... connected<br>
* Connected to <ip> (<ip>) port 443 (#0)<br>
* successfully set certificate verify locations:<br>
* CAfile: none<br>
CApath: /etc/ssl/certs<br>
* SSLv3, TLS handshake, Client hello (1):<br>
* SSLv3, TLS handshake, Server hello (2):<br>
* SSLv3, TLS handshake, CERT (11):<br>
* SSLv3, TLS handshake, Server finished (14):<br>
* SSLv3, TLS handshake, Client key exchange (16):<br>
* SSLv3, TLS change cipher, Client hello (1):<br>
* SSLv3, TLS handshake, Finished (20):<br>
* SSLv3, TLS change cipher, Client hello (1):<br>
* SSLv3, TLS handshake, Finished (20):<br>
* SSL connection using RC4-SHA<br>
* Server certificate:<br>
* subject: CN=<host>; unstructuredName=<host><br>
* start date: 2010-02-03 00:10:30 GMT<br>
* expire date: 2020-02-01 00:10:30 GMT<br>
* common name: <host> (does not match '<ip>')<br>
* issuer: CN=<host>; unstructuredName=<host><br>
* SSL certificate verify result: self signed certificate (18),<br>
continuing anyway.<br>
> GET / HTTP/1.1<br>
> User-Agent: curl/7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0<br>
OpenSSL/0.9.8o zlib/<a href="http://1.2.3.4" target="_blank">1.2.3.4</a> libidn/1.15 libssh2/1.2.5<br>
> Host: <ip><br>
> Accept: */*<br>
><br>
* HTTP 1.0, assume close after body<br>
< HTTP/1.0 302 Object Moved<br>
< Server: Cisco AWARE 2.0<br>
<<br>
Fri, 01 Feb 2013 04:07:54 GMT<br>
< Location: /+CSCOE+/logon.html<br>
< Set-Cookie: tg=; expires=Thu, 01 Jan 1970 22:00:00 GMT; path=/<br>
< Content-Type: text/html; charset=UTF-8<br>
< Transfer-Encoding: chunked<br>
< Cache-Control: no-cache<br>
< Pragma: no-cache<br>
* HTTP/1.0 connection set to keep alive!<br>
< Connection: Keep-Alive<br>
< Date:<br>
<br>
* Connection #0 to host <ip> left intact<br>
* Closing connection #0<br>
* SSLv3, TLS alert, Client hello (1):<br>
nagios:/usr/lib/nagios/plugins#<br>
=====================================================<br>
<br>
<br>
------------------------------------------------------------------------------<br>
Everyone hates slow websites. So do we.<br>
Make your web apps faster with AppDynamics<br>
Download AppDynamics Lite for free today:<br>
<a href="http://p.sf.net/sfu/appdyn_d2d_jan" target="_blank">http://p.sf.net/sfu/appdyn_d2d_jan</a><br>
_______________________________________________<br>
Nagios-users mailing list<br>
<a href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a><br>
<a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a><br>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.<br>
::: Messages without supporting info will risk being sent to /dev/null<br>
</blockquote></div><br></div>