<font size=2 face="sans-serif">It looks like xymonnet does not use ssl</font>
<br>
<br>
<br><font size=2 face="sans-serif"> ldd `which wget` | egrep "ssl|crypto"
; echo $?</font>
<br><font size=2 face="sans-serif"> libssl.so.10
=> /usr/lib64/libssl.so.10 (0x00007f5a5b183000)</font>
<br><font size=2 face="sans-serif"> libcrypto.so.10
=> /usr/lib64/libcrypto.so.10 (0x00007f5a5ade9000)</font>
<br><font size=2 face="sans-serif"> libk5crypto.so.3
=> /lib64/libk5crypto.so.3 (0x00007f5a59ad7000)</font>
<br><font size=2 face="sans-serif">0</font>
<br>
<br><font size=2 face="sans-serif">ldd product/xymon/server/bin/xymonnet
| egrep "ssl|crypto" ; echo $?</font>
<br><font size=2 face="sans-serif">1</font>
<br>
<br><font size=2 face="sans-serif">ldd product/xymon/server/bin/xymonnet</font>
<br><font size=2 face="sans-serif"> linux-vdso.so.1
=> (0x00007fff67ffe000)</font>
<br><font size=2 face="sans-serif"> librt.so.1
=> /lib64/librt.so.1 (0x00007f7a15b07000)</font>
<br><font size=2 face="sans-serif"> libpcre.so.0
=> /lib64/libpcre.so.0 (0x00007f7a158db000)</font>
<br><font size=2 face="sans-serif"> libc.so.6
=> /lib64/libc.so.6 (0x00007f7a15547000)</font>
<br><font size=2 face="sans-serif"> libpthread.so.0
=> /lib64/libpthread.so.0 (0x00007f7a1532a000)</font>
<br><font size=2 face="sans-serif"> /lib64/ld-linux-x86-64.so.2
(0x00007f7a15d18000)</font>
<br>
<br>
<br><font size=2 face="sans-serif">ldd `which openssl` | egrep "ssl|crypto"</font>
<br><font size=2 face="sans-serif"> libssl.so.10
=> /usr/lib64/libssl.so.10 (0x00007f8fa7ce4000)</font>
<br><font size=2 face="sans-serif"> libk5crypto.so.3
=> /lib64/libk5crypto.so.3 (0x00007f8fa7389000)</font>
<br><font size=2 face="sans-serif"> libcrypto.so.10
=> /usr/lib64/libcrypto.so.10 (0x00007f8fa6fee000)</font>
<br>
<br>
<br><font size=2 face="sans-serif">As I had wrote some time ago - I am
sure I had repied Yes to use SSL during xymon installation.</font>
<br><font size=2 face="sans-serif">And I had reinstalled again on other
machine to double check, but with the same result.</font>
<br>
<br><font size=2 face="sans-serif">So, it looks like problem is with installation
process. </font>
<br><font size=2 face="sans-serif">Here is "ssl" grepped from
make log. May be this will help:</font>
<br>
<br><font size=2 face="sans-serif">[xymon@miminob xymon-4.3.11]$ grep -i
ssl xymon_make.log</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" OSDEF="-DLINUX"
RPATHOPT="-Wl,--rpath," PCREINCDIR="" ZLIBINCDIR=""
SSLFLAGS="" SSLINCDIR="" SSLLIBS="" NETLIBS=""
LIBRTDEF="-lrt" XYMONTOPDIR="/u01/app/xymon/product/xymon4.3.11"
XYMONLOGDIR="/u01/app/xymon/logs/xymon4.3.11" XYMONHOSTNAME="miminob.cominder.eu"
XYMONHOSTIP="==XYMON_HOST_IP_REPLACED==" XYMONHOSTOS="linux"
make -C lib all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
SSLFLAGS="" SSLINCDIR="" SSLLIBS="" NETLIBS=""
ZLIBLIBS="" LIBRTDEF="-lrt" XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server"
make -C common all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
SSLFLAGS="" SSLINCDIR="" SSLLIBS="" NETLIBS=""
LIBRTDEF="-lrt" XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server"
XYMONVAR="/u01/app/xymon/product/xymon4.3.11/data" HISTGRAPHDEF=""
RUNTIMEDEFS="" PCREINCDIR="" PCRELIBS="-lpcre"
ZLIBINCDIR="" ZLIBLIBS="" make -C xymongen all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
SSLFLAGS="" SSLINCDIR="" SSLLIBS="" DOLDAP=""
LDAPFLAGS="" LDAPINCDIR="" LDAPLIBS="" DOSNMP="no"
NETLIBS="" XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server"
ARESVER="1.7.3" FPINGVER="3.0" RUNTIMEDEFS=""
PCREINCDIR="" PCRELIBS="-lpcre" SQLITELIBS=""
ZLIBINCDIR="" ZLIBLIBS="" LIBRTDEF="-lrt"
make -C xymonnet all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
SSLLIBS="" NETLIBS="" LIBRTDEF="-lrt" XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server"
make -C xymonproxy all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
SSLLIBS="" NETLIBS="" LIBRTDEF="-lrt" XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server"
make -C build all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
DORRD="yes" RRDDEF="-DRRDTOOL12" RRDINCDIR=""
PCREINCDIR="" SSLFLAGS="" SSLLIBS="" NETLIBS=""
RRDLIBS="-lrrd " PCRELIBS="-lpcre" SQLITELIBS=""
ZLIBINCDIR="" ZLIBLIBS="" LIBRTDEF="-lrt"
XYMONTOPDIR="/u01/app/xymon/product/xymon4.3.11" XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server"
XYMONVAR="/u01/app/xymon/product/xymon4.3.11/data" XYMONLOGDIR="/u01/app/xymon/logs/xymon4.3.11"
XYMONHOSTNAME="miminob.cominder.eu" XYMONHOSTIP="==XYMON_HOST_IP_REPLACED=="
XYMONHOSTOS="linux" XYMONUSER="xymon" CGIDIR="/u01/app/xymon/product/xymon4.3.11/cgi-bin"
SECURECGIDIR="/u01/app/xymon/product/xymon4.3.11/cgi-secure"
XYMONHOSTURL="/xymon" XYMONCGIURL="/xymon-cgi" SECUREXYMONCGIURL="/xymon-seccgi"
MAILPROGRAM=""mail"" RUNTIMEDEFS="" INSTALLWWWDIR="/u01/app/xymon/product/xymon4.3.11/server/www"
INSTALLETCDIR="/u01/app/xymon/product/xymon4.3.11/server/etc"
FPING="xymonping" make -C xymond all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
DORRD="yes" RRDDEF="-DRRDTOOL12" RRDINCDIR=""
PCREINCDIR="" ZLIBINCDIR="" ZLIBLIBS="" SSLLIBS=""
NETLIBS="" RRDLIBS="-lrrd " PCRELIBS="-lpcre"
LIBRTDEF="-lrt" XYMONTOPDIR="/u01/app/xymon/product/xymon4.3.11"
XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server" XYMONVAR="/u01/app/xymon/product/xymon4.3.11/data"
XYMONLOGDIR="/u01/app/xymon/logs/xymon4.3.11" XYMONHOSTNAME="miminob.cominder.eu"
XYMONHOSTIP="==XYMON_HOST_IP_REPLACED==" XYMONHOSTOS="linux"
XYMONUSER="xymon" CGIDIR="/u01/app/xymon/product/xymon4.3.11/cgi-bin"
SECURECGIDIR="/u01/app/xymon/product/xymon4.3.11/cgi-secure"
XYMONHOSTURL="/xymon" XYMONCGIURL="/xymon-cgi" SECUREXYMONCGIURL="/xymon-seccgi"
MAILPROGRAM=""mail"" RUNTIMEDEFS="" INSTALLWWWDIR="/u01/app/xymon/product/xymon4.3.11/server/www"
INSTALLETCDIR="/u01/app/xymon/product/xymon4.3.11/server/etc"
make -C web all</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" OSDEF="-DLINUX"
RPATHOPT="-Wl,--rpath," PCREINCDIR="" ZLIBINCDIR=""
SSLFLAGS="" SSLINCDIR="" SSLLIBS="" NETLIBS=""
LIBRTDEF="-lrt" XYMONTOPDIR="/u01/app/xymon/product/xymon4.3.11"
XYMONLOGDIR="/u01/app/xymon/logs/xymon4.3.11" XYMONHOSTNAME="miminob.cominder.eu"
XYMONHOSTIP="==XYMON_HOST_IP_REPLACED==" XYMONHOSTOS="linux"
LOCALCLIENT="" make -C lib client</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " LDFLAGS="" RPATHOPT="-Wl,--rpath,"
SSLFLAGS="" SSLINCDIR="" SSLLIBS="" NETLIBS=""
ZLIBLIBS="" LIBRTDEF="-lrt" XYMONHOME="/u01/app/xymon/product/xymon4.3.11/server"
make -C common client</font>
<br><font size=2 face="sans-serif">CC="gcc" CFLAGS="-g -O2
-Wall -Wno-unused -Wno-pointer-sign -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64
-DLINUX -I`pwd`/include " XYMONHOME="/u01/app/xymon/product/xymon4.3.11/client"
XYMONHOSTIP="==XYMON_HOST_IP_REPLACED==" LOCALCLIENT=""
SSLLIBS="" NETLIBS="" LIBRTDEF="-lrt" make
-C client all</font>
<br>
<br><font size=2 face="sans-serif">Note: I had replaced in e-mail real
server IP with ==XYMON_HOST_IP_REPLACED==.</font>
<br>
<br>
<br>
<br><font size=2 face="Verdana">Best regards,</font>
<br>
<br><font size=2 face="Verdana">Andrey Chervonets</font>
<br><font size=2 face="Verdana">----------------------</font>
<br><font size=2 face="Verdana">SIA CoMinder</font>
<br><a href=http://www.cominder.eu/><font size=2 face="Verdana">http://www.cominder.eu/</font></a>
<br><font size=2 face="Verdana">mobile: +371 26517848</font>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">Jeremy Laidman <jlaidman@rebel-it.com.au></font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">Andrey Chervonets <A.Chervonets@cominder.eu>,
</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc:
</font><font size=1 face="sans-serif">Henrik Størner <henrik@hswn.dk>,
"xymon@xymon.com" <xymon@xymon.com></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">25.10.2013 02:45</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">Re: [Xymon]
XyMon 4.3.12 - what about HTTPS problems reported for 4.3.11 ?</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3 face="Arial">On 23 October 2013 21:16, Andrey Chervonets
<</font><a href=mailto:A.Chervonets@cominder.eu target=_blank><font size=3 color=blue face="Arial"><u>A.Chervonets@cominder.eu</u></font></a><font size=3 face="Arial">>
wrote:</font>
<br><font size=3 face="sans-serif">Problem is for some sites with valid
certificates too.</font><font size=3 face="Arial"> </font><font size=3 face="sans-serif"><br>
I had checked to access page with wget or lynx - and it is working.</font><font size=3 face="Arial">
</font><font size=3 face="sans-serif"><br>
So I do not see reason why Xymon should get "Server Timeout"
for the same target.</font><font size=3 face="Arial"> <br>
</font><font size=3 face="sans-serif"><br>
Here is the debug of wget. Please, advice how to diagnose/debug Xymon to
find the solution.</font><font size=3 face="Arial"> </font><font size=3 face="sans-serif"><br>
I am a bit confused why nobody reporting the same problem:</font><font size=3 face="Arial">
</font><font size=3 face="sans-serif"><br>
* nobody using new openssl libraries?</font><font size=3 face="Arial">
</font><font size=3 face="sans-serif"><br>
* nobody do https tests for some, may a bot non-standard SSL certificates
or web-sites?</font><font size=3 face="Arial"> </font>
<br>
<br><font size=3 face="Arial">You might just be unlucky. If half
of all websites have implementations that trigger the problem, and if half
of all Xymon installations have the buggy openssl library, then only 25%
of people will get the problem. Given that not all Xymon users test
https websites, and of those, not all of them are subscribed to The List,
the odds drop off very quickly. Oh, and my first guesses of half
websites and half of openssl installs used for Xymon is almost certainly
very high. The proportions might be closer to 10%. So the odds are
against you finding someone else on The List with the same symptoms.</font>
<br>
<br><font size=3 face="Arial">Try the following:</font>
<br>
<br><font size=3 face="Courier New">ldd `which wget` | egrep "ssl|crypto"</font>
<br><font size=3 face="Courier New">ldd ~xymon/server/bin/xymonnet | egrep
"ssl|crypto"</font>
<br><font size=3 face="Courier New">ldd `which openssl` | egrep "ssl|crypto"</font>
<br>
<br><font size=3 face="Arial">If the libraries used by the two tools are
different, then you should not be surprised to get different behaviour.</font>
<br>
<br><font size=3 face="Arial">Try configuring a known good website on the
Internet in your https monitoring. I'm guessing that </font><a href=https://www.xymon.org/><font size=3 color=blue face="Arial"><u>https://www.xymon.org/</u></font></a><font size=3 face="Arial">
would be OK.</font>
<br>
<br><font size=3 face="Arial">Try to connect to the websites using openssl:</font>
<br>
<br><font size=3 face="Courier New">openssl s_client -connect </font><a href=http://epak.pmlp.gov.lv:443/><font size=3 color=blue face="Courier New"><u>epak.pmlp.gov.lv:443</u></font></a>
<br>
<br><font size=3 face="Arial">If that times out, it might show a message
to indicate why.</font>
<br>
<br><font size=3 face="Arial">J</font>
<br>
<br>