Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-1563

SSL Client Certificate Support for Webchecks

XMLWordPrintable

      We need to monitor websites that are protected by client certificates. So i created an prof of concept patch to enable the libcurl client certficate support.

      Take a look at: https://www.zabbix.com/forum/showthread.php?t=38625

      Hello,
      this is a quick and dirty patch/hack to monitor client certificate protected websites. This patch is against Zabbix 2.0.4.
      The cert files have to be in PEM format. You need an file for the CA, the client certifcate, the private key and the password for this private key.

      This was my example code for libcurl SSL support: http://curl.haxx.se/libcurl/c/simplessl.html

      With the curl cmd tool and an .curlrc file it's possible to test the PEM files:
      .curlrc
      --insecure
      --cert clientcert.pem
      --cert-type PEM
      --cacert cacert.pem
      --key clientkey.pem
      --pass ***

      I hope this patch is useful for someone.

      Regards,
      Clemens

        1. sslcertpatch.png
          48 kB
          Clemens Gesell
        2. zbx_httptest.c_sslcert.patch
          8 kB
          Clemens Gesell

            Unassigned Unassigned
            clemensg Clemens Gesell
            Votes:
            5 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: