[check_ldap] Disable SSL common name verification

Pierre GINDRAUD <[email protected]> Sat, 14 May 2016 21:09:25 +0200

Newsgroups	gmane.network.nagios.plugins,gmane.network.monitoring.plugins.user
Message-ID	<[email protected]>

Hello,

I'm trying to use the 'check_ldap' plugin to monitor an instance of an OpenLDAP server configured with StartTLS on port 389.
In my Nagios host definition, I've set the adresse of the server to a relative name such just 'servername' instead of full qualified domain name.
During the STARTTLS handshake the check plugin, return an error with the following message :

    additional info: TLS: hostname does not match CN in peer certificate

Using relative domain name as address for host definition is convenient and I can't use the full qualified domain name instead.

Is there any way t disable SSL common name verification by using extra opts ?


Thanks by advance

-- 

*Pierre GINDRAUD*

Mail : [email protected] <mailto:[email protected]>

Twitter <https://twitter.com/PierreGindraud> Google plus <https://plus.google.com/116501681304840985858/> Linkedin <https://www.linkedin.com/pub/pierre-gindraud/99/a15/871>
Viadéo <https://www.viadeo.com/fr/profile/pierre.gindraud>

signature.asc (application/pgp-signature, 819 B)