Hi, 

Could you try this command please and paste the result?

 /usr/lib/centreon/plugins//centreon_nsclient_restapi.pl --plugin=apps::nsclient::restapi::plugin --mode=query --hostname='192.168.0.53' --port='8443' --proto='https' --legacy-password='XXXXX' --http-backend-curl --insecure --command=check_centreon_plugins --arg='apps::backup::veeam::local::plugin' --arg='licenses' ​

/usr/lib/centreon/plugins//centreon_nsclient_restapi.pl --plugin=apps::nsclient::restapi::plugin --mode=query --hostname='192.168.0.53' --port='8443' --proto='https' --legacy-password='centreon' --http-backend-curl --insecure --command=check_centreon_plugins --arg='apps::backup::veeam::local::plugin' --arg='licenses' ​
Unknown option: http-backend-curl at /usr/lib/centreon/plugins//centreon_nsclient_restapi.pl line 463.
groot@Centreon-IT100-HomeLab ~]#
 

so:

proot@Centreon-IT100-HomeLab ~]# /usr/lib/centreon/plugins//centreon_nsclient_restapi.pl --plugin=apps::nsclient::restapi::plugin --mode=query --hostname='192.168.0.53' --port='8443' --proto='https' --legacy-password='centreon' --http-backend --insecure --command=check_centreon_plugins --arg='apps::backup::veeam::local::plugin' --arg='licenses' ​
UNKNOWN: 500 read timeout
 

/usr/lib/centreon/plugins//centreon_nsclient_restapi.pl --plugin=apps::nsclient::restapi::plugin --mode=query --hostname='192.168.0.53' --port='8443' --proto='https' --legacy-password='centreon' --http-backend --insecure --command=check_centreon_plugins --arg='apps::backup::veeam::local::plugin' --arg='licenses' ​--verbose --debug
UNKNOWN: 500 read timeout
======> request send
GET https://192.168.0.53:8443/query/check_centreon_plugins?apps%3A%3Abackup%3A%3Aveeam%3A%3Alocal%3A%3Aplugin&licenses
User-Agent: centreon::plugins::backend::http::useragent
Password: centreon

======> response done
500 read timeout
Content-Type: text/plain
Client-Date: Tue, 13 Sep 2022 16:05:52 GMT
Client-Warning: Internal response

read timeout at /usr/share/perl5/vendor_perl/Net/HTTP/Methods.pm line 268.
 

changed into:

/usr/lib/centreon/plugins//centreon_nsclient_restapi.pl --plugin=apps::nsclient::restapi::plugin --mode=query --hostname='192.168.0.53' --port='8443' --proto='https' --legacy-password='centreon' --http-backend=curl --insecure --command=check_centreon_plugins --arg='apps::backup::veeam::local::plugin' --arg='licenses' ​--verbose --debug
UNKNOWN: 450 Timeout reached
== Info:   Trying 192.168.0.53...
== Info: TCP_NODELAY set
== Info: Connected to 192.168.0.53 (192.168.0.53) port 8443 (#0)
== Info: ALPN, offering http/1.1
== Info: successfully set certificate verify locations:
== Info:   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
== Info: TLSv1.3 (OUT), TLS handshake, Client hello (1):
== Info: TLSv1.3 (IN), TLS handshake, Server hello (2):
== Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
== Info: TLSv1.2 (IN), TLS handshake, Server finished (14):
== Info: TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
== Info: TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1):
== Info: TLSv1.2 (OUT), TLS handshake, Finished (20):
== Info: TLSv1.2 (IN), TLS handshake, Finished (20):
== Info: SSL connection using TLSv1.2 / AES256-GCM-SHA384
== Info: ALPN, server did not agree to a protocol
== Info: Server certificate:
<..]
== Info:  SSL certificate verify result: self signed certificate (18), continuing anyway.
=> Send header: GET /query/check_centreon_plugins?apps%3A%3Abackup%3A%3Aveeam%3A%3Alocal%3A%3Aplugin&licenses HTTP/1.1
Host: 192.168.0.53:8443
Accept: */* password:centreon

== Info: Operation timed out after 5001 milliseconds with 0 bytes received
== Info: Closing connection 0
== Info: TLSv1.2 (OUT), TLS alert, close notify (256)

great news.

/usr/lib/centreon/plugins//centreon_nsclient_restapi.pl --plugin=apps::nsclient::restapi::plugin --mode=query --hostname='192.168.0.53' --port='8443' --proto='https' --legacy-password='centreon' --http-backend=curl --insecure --timeout=30 --command=check_centreon_plugins --arg='apps::backup::veeam::local::plugin' --arg='licenses' ​--verbose --debug
 

worked. 

How can i make a secure connection? which configuration i missed?

Hi, 

To get rid of the --insecure flag, you’ll have to use an official certiifcate (not self-signed).

​​​​​​​

ok, from an internal ca. Thank you very much for your help.