How to use a client certificate to connect websites in the Web-Mon plugin?

SSL client authentication is available in Webmon Plugin for Netprobe version GA4.3 and above (COL-3984).

Linux Netprobe Copied

When the HTTPS protocol is selected, the Client Certificate option is displayed below the drop-down box.

The Client Certificate option should point to the file path such as /opt/itrs/certs/client.crt, where it is located on the Netprobe machine. The Client Certificate needs to be in PEM format and should be placed on the Netprobe machine.

The same is true for Client Key option should the web server require it. If this requires a passphrase to open, there is an associated Passphrase option.

Validation Copied

If you want to verify whether the CA cert, client cert, and client key formats are correct, you can do so with the curl command. It should return the web server output or error message if there is an error.

For example, assuming the certificate files are placed at /opt/itrs/certs.

cd /opt/itrs/certscurl --cacert ./ca.crt --cert ./client.crt --key ./client.key https://hostname:443 --verbose

Windows Netprobe Copied

For Windows, it is recommended to use Netprobe version GA5.6 (COL-8265) and above. Older Netprobe versions could not specify custom certificate options.