<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Would something like this not work:<br>
<br>
group HTTP<br>
0.0.0.0 host1.example.com # <a href="https://host1.example.com" target="_blank">https://host1.example.com</a><br>
0.0.0.0 host2.example.com # <a href="https://host2.example.com" target="_blank">https://host2.example.com</a><br>
...<br>
<br>
=G=<br>
<br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF416351"><font color="#000000" face="Tahoma" size="2"><b>From:</b> Xymon [xymon-bounces@xymon.com] on behalf of Ralph Mitchell [ralphmitchell@gmail.com]<br>
<b>Sent:</b> Tuesday, August 06, 2013 3:38 PM<br>
<b>To:</b> John D. Alexander<br>
<b>Cc:</b> xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] SSL Certs on servers with multiple virtualhosts<br>
</font><br>
</div>
<div></div>
<div>I have a script that fakes the xymonnet http & sslcert columns. I'll post it to the list this evening when I get home from work.
<div><br>
</div>
<div>Ralph Mitchell</div>
<div><br>
<br>
<div class="gmail_quote">On Tue, Aug 6, 2013 at 2:32 PM, John D. Alexander <span dir="ltr">
<<a href="mailto:JAlexander@feeneywireless.com" target="_blank">JAlexander@feeneywireless.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I’m running Xymon 4.3.12 on CentOS 6.4 and monitoring a number of Apache web servers that each have multiple SSL VirtualHosts.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Xymon appears to be using the openssl s_client utility to check server certificates and since s_client is not SNI compliant, it only picks up the certificate of the first VirtualHost. All other VirtualHosts are reported having the same
certificate.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Does anyone know of a workaround (perhaps using curl) to validate SSL certificates and track expiration dates of those certificates?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks much.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:9.0pt; font-family:"Arial","sans-serif"; color:#00467f">John Alexander</span></b><br>
<span style="font-size:9.0pt; font-family:"Arial","sans-serif"">Network Administrator</span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>
_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</body>
</html>