<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body style='font-family: Verdana,Geneva,sans-serif'>
<p>This looks odd. I thought I remembered Henrik saying that xymon doesn't test ca chains, and found this:</p>
<p>"><em> So, we have an internal CA. So I'm guessing I need to install the CA's certificate of authority to clear this issue up? </em> No, you don't. Xymon doesn't perform validation of certificate chains like curl does - essentially, Xymon behaves like curl with the "--insecure" option. Try running "xymonnet --version" to see if it is able to load the SSL library at all - you should see the SSL library version listed. If that doesn't give you a clue, run "xymoncmd xymonnet --debug HOSTNAME" and see what details it gives about why it cannot connect to the site."</p>
<p>(http://lists.xymon.com/pipermail/xymon/2011-August/032384.html)</p>
<p><br />But the problem in that instance was the openssl libraries not being linked into xymon, and if that were Jason's case I'd expect the godaddy certs to be failed as well. In any case, the diagnostics Henrik calls out might give a clue.</p>
<p>On 2013-01-24 19:39, Ralph Mitchell wrote:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<p>It sounds like perhaps your internal CA certificate(s) are no longer available for xymon to validate the server certificates. I don't have a Fedora18 installation handy right now, but looking at CentOS 6, the CA cert bundle is part of the ca-certificates RPM:</p>
<div> </div>
<div> /etc/pki/tls/certs/ca-bundle.crt</div>
<div> </div>
<div>You could try adding your CA cert pem file to the end of that file, or wherever the bundle lives.</div>
<div> </div>
<div>Ralph Mitchell</div>
<div><br /><br />
<div class="gmail_quote">On Thu, Jan 24, 2013 at 3:43 PM, Jason Chambers <span><<a href="mailto:Jason.Chambers@geosoft.com">Jason.Chambers@geosoft.com</a>></span> wrote:<br />
<blockquote class="gmail_quote" style="margin: 0 0 0 .8ex; border-left: 1px #ccc solid; padding-left: 1ex;">
<div lang="EN-CA">
<div>
<p class="MsoNormal">Hi all,<span style="text-decoration: underline;"></span><span style="text-decoration: underline;"></span></p>
<p class="MsoNormal"><span style="text-decoration: underline;"></span> <span style="text-decoration: underline;"></span></p>
<p class="MsoNormal">I just upgraded to Fedora 18, and now servers that have SSL signed by our internal CA is failing. The http test simply shows “SSL error” meanwhile our public (GoDaddy) certs aren’t causing issues. Is there a log file I can peer into to find out why I’m getting these error messages all of a sudden?<span style="text-decoration: underline;"></span><span style="text-decoration: underline;"></span></p>
<p class="MsoNormal"><span style="text-decoration: underline;"></span> <span style="text-decoration: underline;"></span></p>
<p class="MsoNormal" style="margin-bottom: 8.0pt; line-height: 106%;"><strong><span style="font-size: 9.0pt; line-height: 106%; font-family: 'Arial','sans-serif'; color: #262626;">Jason Chambers<br /></span></strong><span style="font-size: 9.0pt; line-height: 106%; font-family: 'Arial','sans-serif'; color: #666666;">Network Administrator | Geosoft<br /></span><span style="font-size: 9.0pt; line-height: 106%; font-family: 'Arial','sans-serif'; color: #666678;"><a href="http://www.geosoft.com/"><span style="color: #666678;">geosoft.com</span></a> | <a href="http://blogs.geosoft.com/"><span style="color: #666678;">blog</span></a> | <a href="http://twitter.com/geosoft"><span style="color: #666678;">twitter</span></a> | <a href="http://www.linkedin.com/company/geosoft-inc."><span style="color: #666678;">linkedIn</span></a> | <a href="http://www.facebook.com/GeosoftInc"><span style="color: #666678;">facebook</span></a> | T <a href="tel:%2B1%20416.369.0111%20%23344">+1 416.369.0111 #344</a> | M <a href="tel:%2B1%20416.508.1410">+1 416.508.1410</a><br /><br /></span><span style="font-size: 9.0pt; line-height: 106%; font-family: 'Arial','sans-serif'; color: #666666;">Trending topic on Earth Explorer: </span><span style="font-size: 9.0pt; line-height: 106%; font-family: 'Arial','sans-serif'; color: #666678;"><a href="http://www.earthexplorer.com/2012/Introduction_of_VOXI_Earth_Modelling_technology.asp"><span style="color: #666678;">VOXI Earth Modelling</span></a></span><span style="font-size: 9.0pt; line-height: 106%; font-family: 'Arial','sans-serif'; color: #666666;"><span style="text-decoration: underline;"></span><span style="text-decoration: underline;"></span></span></p>
<p class="MsoNormal"><span style="text-decoration: underline;"></span> <span style="text-decoration: underline;"></span></p>
</div>
</div>
<br />_______________________________________________<br /> Xymon mailing list<br /><a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br /><a href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</a><br /><br /></blockquote>
</div>
</div>
<br />
<pre>_______________________________________________
Xymon mailing list
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a>
<a href="http://lists.xymon.com/mailman/listinfo/xymon">http://lists.xymon.com/mailman/listinfo/xymon</a>
</pre>
</blockquote>
<div> </div>
</body></html>