Zabbix monitoring website SSL related ( without zabbix agent )

[Frank_Cj]

Hi, I am using Zabbix to monitor a website "HTTPS service is running" and "SSL cert validity" (how many days to expire).
it occurs a weird problem that the HTTPS service is down, but the SSL cert validity is 192 days.
Does anyone met this problem too and knows why? please help

I am a junior Zabbix user. Thanks everyone

[Viktors Fomics]

Hello

Those processes are pretty much independent: TLS handshake can still happen if HTTPS service is down, therefore SSL certificate information can be retrieved and this check can be successfully made.

[cyber]

Without agent? How is your monitoring built?
Usually if your webserver is down, no port answers and you cannot do any handshake or anything... But if you check for a cert by some other means, then it might be possible to get the value...

[Viktors Fomics]

Usually if your webserver is down, no port answers and you cannot do any handshake or anything

That's only true if the webserver handles the TLS connection, but if there is a layer in between like load balancer, firewall or anything else, that can handle the TLS, then the certificate check will be an independent thing from the webserver availability check.

[cyber]

Lets not overcomplicate things..