<div dir="auto">No output from web server. Check it's logs for web server errors associated with the IP address.</div><div class="gmail_extra"><br><div class="gmail_quote">On 28 Jun. 2017 22:00, "Zoltan Forray" <<a href="mailto:zforray@vcu.edu">zforray@vcu.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thanks for the help and the command. However, since I know very little about certs, here is the results:<div><br></div><div><div>[xymon@xymon1 etc]$ openssl s_client -connect <a href="http://quikfm.vcu.edu:443" target="_blank">quikfm.vcu.edu:443</a> -showcerts</div><div>CONNECTED(00000003)</div><div>write:errno=104</div><div>---</div><div>no peer certificate available</div><div>---</div><div>No client certificate CA names sent</div><div>---</div><div>SSL handshake has read 0 bytes and written 247 bytes</div><div>---</div><div>New, (NONE), Cipher is (NONE)</div><div>Secure Renegotiation IS NOT supported</div><div>Compression: NONE</div><div>Expansion: NONE</div><div>---</div></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jun 27, 2017 at 7:56 PM, Phil Crooker <span dir="ltr"><<a href="mailto:Phil.Crooker@orix.com.au" target="_blank">Phil.Crooker@orix.com.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr" style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Browsers are a pretty opaque tool for testing certificates because of caching and locally stored certificates. Try openssl:</p>
<p><br>
</p>
<p> openssl s_client -connect hostname:443 -showcerts<br>
</p>
<p><br>
</p>
<p>You should see the whole chain of certificates going back to a root cert. Are you missing an intermediate certificate? You may need to add it to the ssl config in the webserver - in apache you can just concatenate your host cert and the intermediate.<br>
</p>
<p><br>
</p>
<p>s_client shows the status of the connection at the bottom:</p>
<p><br>
</p>
<p> Verify return code: 0 (ok)<br>
</p>
<p><br>
</p>
<p>Not 0 is an error of course.</p>
<p><br>
</p>
<p>As s_client opens a connection, you need to CTRL-C to break out (or issue an http command if you wish)<br>
</p>
<p><br>
</p>
<p>Hope that helps.</p>
<p><br>
</p>
<div style="color:rgb(33,33,33)">
<hr style="display:inline-block;width:98%"><div><div class="m_773943962733541914h5">
<div>
<div dir="ltr"><br>
But now it simply refuses to get a valid https connection from the Xymon server eventhough you can web-browse to it with no issues and the browser says there is a valid https/cert/connection? Is there any place in Xymon I can see why it is failing?</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Jun 27, 2017 at 3:39 PM, John Thurston <span dir="ltr">
<<a href="mailto:john.thurston@alaska.gov" target="_blank">john.thurston@alaska.gov</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<span>On 6/27/2017 11:17 AM, Zoltan Forray wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
We are constantly having issues with sslcert alerts going non-green<br>
eventhough it says the cert is fine. Related to this is there being an<br>
issue getting to the https page from the Xymon server yet I can access<br>
it just fine from my browser.<br>
</blockquote>
<br>
</span>Any failure to establish an SSL connection will result in an error under sslcert. Could it be a failure to negotiate a secure connection due to an unreliable network connection?<br>
<br>
I suggest looking in the error log on your web server. You may find severed or incomplete connection attempts.<span class="m_773943962733541914m_2564365621489390870HOEnZb"><font color="#888888"><br>
<br>
-- <br>
Do things because you should, not just because you can.<br>
<br>
John Thurston <a href="tel:907-465-8591" value="+19074658591" target="_blank">
907-465-8591</a><br>
<a href="mailto:John.Thurston@alaska.gov" target="_blank">John.Thurston@alaska.gov</a><br>
Department of Administration<br>
State of Alaska<br>
______________________________<wbr>_________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" rel="noreferrer" target="_blank">http://lists.xymon.com/mailman<wbr>/listinfo/xymon</a><br>
</font></span></blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="m_773943962733541914m_2564365621489390870gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div><b>Zoltan Forray</b></div>
<div>Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator</div>
<div>Xymon Monitor Administrator</div>
<div>VMware Administrator</div>
<div>Virginia Commonwealth University</div>
<div>UCC/Office of Technology Services</div>
<div><a href="http://www.ucc.vcu.edu" target="_blank">www.ucc.vcu.edu</a><br>
</div>
<div><a href="mailto:zforray@vcu.edu" target="_blank">zforray@vcu.edu</a> - <a href="tel:(804)%20828-4807" value="+18048284807" target="_blank">804-828-4807</a></div>
<div><font size="1">Don't be a phishing victim - VCU and other reputable organizations will never use email to request that you reply with your password, social security number or confidential personal information. For more details visit
<a href="http://infosecurity.vcu.edu/phishing.html" target="_blank">http://infosecurity.vcu.edu/ph<wbr>ishing.html</a> </font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div></div></div>
</div>
--
<table style="width:650px" width="650">
<tbody><tr>
<td valign="top" width="185" style="vertical-align:top;width:185px">
<img src="http://web.orix.com.au/_resource/email/email-banner.jpg?rnd=201703091" width="151" style="width:151px">
</td>
<td valign="top" style="vertical-align:top">
<div id="m_773943962733541914m_2564365621489390870topSigBanner" style="background-color:#1f2a6b;width:465px;height:30px;margin:10px 0 15px 0;float:left"></div>
<div id="m_773943962733541914m_2564365621489390870sigText" style="font:normal 9px Arial,Helvetica,Sans-serif;color:#949494">
<p></p><h1 style="font-size:11px;font-weight:bold;padding:0;margin:0">Please consider the environment before printing this e-mail</h1><p></p>
<p style="padding:0;margin:0;text-align:justify">This message from ORIX Australia may contain confidential and/or privileged information. If you are not the intended recipient, any use, disclosure or copying of this message (or of any attachments to it) is not authorised. If you have received this message in error, please notify the sender immediately and delete the message and any attachments from your system. Please inform the sender if you do not wish to receive further communications by email.</p>
<p>ORIX has a Privacy Policy which outlines what kinds of personal information we collect and hold, how we may collect and handle it, and your rights regarding personal information. Please let us know if you would like a copy. The Privacy Policy and a Collection Statement are also available on our <a href="http://www.orix.com.au" style="color:#949494" target="_blank">website</a>.</p>
<p>We do not accept liability for any loss or damage caused by any computer viruses or defects that may be transmitted with this message. We recommend you carry out your own checks for viruses or defects.</p>
</div>
</td>
</tr>
</tbody></table>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="m_773943962733541914gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><b>Zoltan Forray</b></div><div>Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator</div><div>Xymon Monitor Administrator</div><div>VMware Administrator</div><div>Virginia Commonwealth University</div><div>UCC/Office of Technology Services</div><div><a href="http://www.ucc.vcu.edu" target="_blank">www.ucc.vcu.edu</a><br></div><div><a href="mailto:zforray@vcu.edu" target="_blank">zforray@vcu.edu</a> - 804-828-4807</div><div><font size="1">Don't be a phishing victim - VCU and other reputable organizations will never use email to request that you reply with your password, social security number or confidential personal information. For more details visit <a href="http://infosecurity.vcu.edu/phishing.html" target="_blank">http://infosecurity.vcu.edu/<wbr>phishing.html</a> </font></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div>
<br>______________________________<wbr>_________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" rel="noreferrer" target="_blank">http://lists.xymon.com/<wbr>mailman/listinfo/xymon</a><br>
<br></blockquote></div></div>