How do I use client certificate to connect websites in the Web-Mon plugin?

Linux Netprobe

When the HTTPS protocol is selected, the Client Certificate option is displayed below the drop down box.

The Client Certificate option should point to the file path (e.g. /opt/itrs/certs/client.crt) where it is located on the Netprobe machine.  The Client Certificate needs to be in PEM format, and it should be placed on the Netprobe machine.

The same is true for Client Key option should the web server requires it. If this requires a passphrase to open, there is an associated Passphrase option.

Validation

If you want to verify whether the CA cert, client cert and client key formats are correct, you can do so with the "curl" command. It should return the web server output or error message if there is an error.

For example, assuming the certificate files are placed at /opt/itrs/certs:

cd /opt/itrs/certs
curl --cacert ./ca.crt --cert ./client.crt --key ./client.key https://hostname:443 --verbose

Windows Netprobe

For Windows Netprobe, the Certificate and certificate-related settings in Web-Mon plugin are ignored.

Web-Mon makes use of OS-specific certificate stores for identifying certificates to use during SSL authentication. As such, the required certificates must be installed in the appropriate certificate stores in Windows Control Panel.

Validation

The "curl" command is not present in default Windows installations. Users are suggested to try with a normal web browser that utilizes the Windows certificate stores (e.g. Internet Explorer).