Re: OpenNMS HTTPS Monitor & IIS Rejecting connections

Hi Joe,

Not an expert here, but do you have a 443 binding without a host name? I.e.
for the default web site?

[image: Inline image 1]

This should catch the IP connection to the server.

Best regards,

-- 
Marc D.

Real is just a matter of perception


On Mon, Aug 21, 2017 at 2:21 PM, Madden, Joe <[email protected]> wrote:

> Hi all,
>
>
>
> The latest version of IIS seems to be giving me some headache on
> monitoring using OpenNMS.
>
>
>
> Our IIS runs three web services using server name indication. Each one is
> a TLS website on port 443.
>
>
>
>
>
> Our webserver will respond with this:
>
>
>
> https://joe.test.co.uk/login.asp
>
> HTTP request sent, awaiting response... 200 OK
>
> Length: 2591 (2.5K) [text/html]
>
> Saving to: ‘login.asp’
>
>
>
> but will not respond with this
>
>
>
> https://192.168.201.30/login.asp
>
>
>
> Connecting to 192.168.201.30:443... connected.
>
> Unable to establish SSL connection.
>
>
>
> curl -1 https://192.168.201.30/login.asp
>
> curl: (35) TCP connection reset by peer
>
>
>
> It seems that IIS rejects the connection when attempted to connect to via
> IP address. Does anyone have any what setting I need to change to permit it
> to connect via IP (And then use the SNI to check which server it actually
> services up)
>
>
>
> The server I have setup is below – and it gets the java connection error
> message as below. I guess it falls into the same issue.
>
>
>
>
>
>   <service name="CAB - TssPlansRegistry" interval="60000"
> user-defined="false" status="on">
>
>          <parameter key="host-name" value=" joe.test.co.uk "/>
>
>          <parameter key="retry" value="3"/>
>
>          <parameter key="timeout" value="5000"/>
>
>          <parameter key="port" value="443"/>
>
>          <parameter key="url" value="/login.asp"/>
>
>          <parameter key="response" value="200"/>
>
>    </service>
>
>
>
> 2017-08-21 12:15:29,769 WARN  [pool-9-thread-298] o.o.n.p.m.HttpMonitor:
> SocketException while polling cab/192.168.201.30:CAB -
> TssPlansRegistry:443
>
> java.net.SocketException: Connection reset
>
>         at java.net.SocketInputStream.read(SocketInputStream.java:209)
> ~[?:1.8.0_112]
>
>         at java.net.SocketInputStream.read(SocketInputStream.java:141)
> ~[?:1.8.0_112]
>
>         at sun.security.ssl.InputRecord.readFully(InputRecord.java:465)
> ~[?:1.8.0_112]
>
>         at sun.security.ssl.InputRecord.read(InputRecord.java:503)
> ~[?:1.8.0_112]
>
>         at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973)
> ~[?:1.8.0_112]
>
>         at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
> ~[?:1.8.0_112]
>
>         at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:747)
> ~[?:1.8.0_112]
>
>         at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:123)
> ~[?:1.8.0_112]
>
>         at java.io.OutputStream.write(OutputStream.java:75) ~[?:1.8.0_112]
>
>         at org.opennms.netmgt.poller.monitors.HttpMonitor$
> HttpMonitorClient.sendHttpCommand(HttpMonitor.java:543)
> ~[opennms-services-20.0.1.jar:?]
>
>         at org.opennms.netmgt.poller.monitors.HttpMonitor.poll(HttpMonitor.java:157)
> [opennms-services-20.0.1.jar:?]
>
>         at org.opennms.netmgt.poller.client.rpc.
> PollerClientRpcModule$1.get(PollerClientRpcModule.java:77)
> [org.opennms.features.poller.client-rpc-20.0.1.jar:?]
>
>         at org.opennms.netmgt.poller.client.rpc.
> PollerClientRpcModule$1.get(PollerClientRpcModule.java:71)
> [org.opennms.features.poller.client-rpc-20.0.1.jar:?]
>
>         at java.util.concurrent.CompletableFuture$AsyncSupply.
> run(CompletableFuture.java:1590) [?:1.8.0_112]
>
>         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> [?:1.8.0_112]
>
>         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> [?:1.8.0_112]
>
>         at java.lang.Thread.run(Thread.java:745) [?:1.8.0_112]
>
>
>
>
>
> Cheers for any help.
>
>
>
> Joe.
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Please read the OpenNMS Mailing List FAQ:
> http://www.opennms.org/index.php/Mailing_List_FAQ
>
> opennms-discuss mailing list
>
> To *unsubscribe* or change your subscription options, see the bottom of
> this page:
> https://lists.sourceforge.net/lists/listinfo/opennms-discuss
>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/index.php/Mailing_List_FAQ

opennms-discuss mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-discuss