search

matteocorti / check_ssl_cert

A shell script (that can be used as a Nagios/Icinga plugin) to check an SSL/TLS connection.
GNU General Public License v3.0
360 stars 132 forks source link

HTTP header 'Referrer-Policy' is not supported #489

Closed InfoDub closed 8 months ago

InfoDub commented 8 months ago

Hello,

I am trying to monitor ssl certificate of my website and getting below alert (domain name changed) -

Status Information: SSL_CERT CRITICAL www.example.com:443: HTTP header 'Referrer-Policy' is not supported.

This is the command used - check_ssl_cert --all -t 180 -H $ARG1$ -w 30

Could you please suggest what is the cause of this alert and how can that be solved. Let me know if more details required.

Thanks!

matteocorti commented 8 months ago

Hi,

You are specifying --all which includes --check-http-headers.

Best practices recommend the usage of a Referrer Policy.

Something like:

referrer-policy: same-origin