ignore ssl certificate?

[Jason Lytle]

trying to get Nagios/Check_mk to monitor the JIRA Tomcat process and running into some hurdles...

Anyway, is there a way to have the jolokia plugin ignore the installed SSL certificate on 443?

@jira.lab:/etc/check_mk$ curl https://localhost:443/jira/plugins/servlet/jolokia/list/
curl: (51) SSL: certificate subject name 'www.company.com' does not match target host name 'localhost'

# meanwhile this is fine:

@jira.lab:/etc/check_mk$ curl -k https://localhost:443/jira/plugins/servlet/jolokia/list/

[Jason Lytle]

hi yes because www.company.com is in DNS as something different than 127.0.0.1.

I would like to edit jolokia-access.xml to allow the IP in DNS but the file does not exist (I'd rather not manage hosts file entries)? I don't have the menus in JIRA (as Administrator) that are mentioned on the plugin page.

furthermore, this jolokia plugin does not seem to be compatible with nagios/check_mk's implementation of jolokia - the check_mk agent will not pull from the URL although curl does. jmx4perl is deprecated in favor of jolokia so this is what I would like to use for monitoring. I'm also unable to hook in jolokia's own jar file, it doesn't seem to consider JIRA Tomcat to be a valid tomcat/java process even though it says all you need is java 1_6+

has anyone been successful hooking this into check_mk? I know it is probably a long shot.

thanks again and kind regards,

Jason

[rrudnicki]

Hi Jason, 

Based on the error message, this looks like your certificate is for 'www.company.com'. However, the server hostname is answering for localhost. Use the real hostname in the url should fix this issue or add an entry in your hosts file to your server answer for company.com instead of only localhost.

Another thing, since you are running https on port 443, you don't need to type this in your URL. 

Regards, 

Renato Rudnicki