Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-1563

SSL Client Certificate Support for Webchecks

    XMLWordPrintable

    Details

    • Type: Change Request
    • Status: Closed
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: 2.0.4
    • Fix Version/s: None
    • Component/s: Frontend (F), Server (S)
    • Environment:
      Patch created on RHEL 6.2 x86_64 with curl 7.15.5 against Zabbix 2.0.4

      Description

      We need to monitor websites that are protected by client certificates. So i created an prof of concept patch to enable the libcurl client certficate support.

      Take a look at: https://www.zabbix.com/forum/showthread.php?t=38625

      Hello,
      this is a quick and dirty patch/hack to monitor client certificate protected websites. This patch is against Zabbix 2.0.4.
      The cert files have to be in PEM format. You need an file for the CA, the client certifcate, the private key and the password for this private key.

      This was my example code for libcurl SSL support: http://curl.haxx.se/libcurl/c/simplessl.html

      With the curl cmd tool and an .curlrc file it's possible to test the PEM files:
      .curlrc
      --insecure
      --cert clientcert.pem
      --cert-type PEM
      --cacert cacert.pem
      --key clientkey.pem
      --pass ***

      I hope this patch is useful for someone.

      Regards,
      Clemens

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              clemensg Clemens Gesell
              Votes:
              5 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: