Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Moniotring a website with an SSL certificate

I have APM setup using a vanilla out-of-the-box HTTP monitor on one of my web servers. On that server it redirects to HTTPS using an SSL certificate.

The HTTP monitor is failing and I am wondering if this is because of the re-direct?

When I manually did in my browser what the HTTP monitor is doing, the first time I had to accept the certificate.

Find more posts tagged with

Accepted answers

RogerWong

You're welcome of course, but don't thank me just yet! There might still be a certificate issue on the HTTPS website. Two such scenarios come to mind:

1. The URL of the HTTPS website might not reflect the actual address in its SSL certificate.

Solution: Set 'Ignore CN Errors' in the HTTPS monitor.

2. The website's SSL certificate might have been signed by an authority the APM server doesn't trust.

Solution: Import the signing authority's root certificate as a trusted certificate authority on the APM server. You do that from Control panel > Internet Options > Content tab > Certificates, but you have to obtain the root certificate from the CA first. That's about as much as I know about this topic, unfortunately.

All comments

byrona

The specific error it gives under the little orange info tap is as follows:

Unexpected error occurred. The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

qle

When I manually did in my browser what the HTTP monitor is doing, the first time I had to accept the certificate.

It almost sounds like you found the source of your problem. Would it be possible to import the certificate so that your aren't prompted to accept the certificate in the future?

byrona

I guess I could import the certificate but I don't exactly know how to do this in a way that Orion will find acceptable... assuming that this is the problem.

RogerWong

Byron, I chatted with our dev about this briefly. The HTTP monitor isn't equipped with the settings to handle certificate issues, so it seems you need two monitors here:

1. One HTTP monitor for the web server, but ignoring the redirect (set 'Ignore Redirect')

2. One HTTPS monitor for the secure web server that you get forwarded to.

byrona

Roger

Thanks so much for this information, this is exactly what I needed. You Rock!