<div dir="ltr"><div>Hi Frank,</div><div><br></div><div>Xymon has picked up the certificate that is on <a href="https://66.159.47.82/">https://66.159.47.82/</a> the IP address that <a href="http://www.thesweetbasket.com">www.thesweetbasket.com</a> resolves to. That certificate has indeed expired. However, to get Xymon to test the certificate you are actually using, you need to enable sni. Search for sni in the man page here: <a href="http://xymon.sourceforge.net/xymon/help/manpages/man5/hosts.cfg.5.html">http://xymon.sourceforge.net/xymon/help/manpages/man5/hosts.cfg.5.html</a> But, the short answer is you can probably just add the sni tag to your host in hosts.cfg.<br><br></div>Kind regards, SebA<br></div><div class="gmail_extra"><br><div class="gmail_quote">On 9 January 2018 at 16:06, Frank <span dir="ltr"><<a href="mailto:ve2cii@canasoft.net" target="_blank">ve2cii@canasoft.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
Hi,<br>
<br>
This is for the sslcert service:<br>
<br>
I have xymon monitoring a web site where the certificate has
been changed twice over<br>
the past 2 years. And it is currently up to date. What xymon is
showing for the dates<br>
of the certificate are wrong. Is there a way to fix this so it
shows the correct certificate<br>
and not an old one?<br>
<br>
start date: 2014-12-02 19:29:50 GMT<br>
expire date:2015-04-01 19:29:50 GMT<br>
Tue Jan 9 10:58:46 2018<br>
<br>
<br>
red SSL certificate for <a class="m_4424276543708555576moz-txt-link-freetext" href="https://www.thesweetbasket.com/en/" target="_blank">https://www.thesweetbasket.<wbr>com/en/</a> expired
1013 days ago<br>
<br>
<br>
Server certificate:<br>
<a class="m_4424276543708555576moz-txt-link-abbreviated" href="mailto:subject:/C=CA/ST=Que/L=Montreal/O=Cronomagic/OU=Web/CN=serv1.thesweetbasket.com/emailAddress=frank@canasoft.net" target="_blank">subject:/C=CA/ST=Que/L=<wbr>Montreal/O=Cronomagic/OU=Web/<wbr>CN=serv1.thesweetbasket.com/<wbr>emailAddress=frank@canasoft.<wbr>net</a><br>
start date: 2014-12-02 19:29:50 GMT<br>
expire date:2015-04-01 19:29:50 GMT<br>
key size:1024<br>
<a class="m_4424276543708555576moz-txt-link-abbreviated" href="mailto:issuer:/C=CA/ST=Que/L=Montreal/O=Cronomagic/OU=Web/CN=serv1.thesweetbasket.com/emailAddress=frank@canasoft.net" target="_blank">issuer:/C=CA/ST=Que/L=<wbr>Montreal/O=Cronomagic/OU=Web/<wbr>CN=serv1.thesweetbasket.com/<wbr>emailAddress=frank@canasoft.<wbr>net</a><br>
signature algorithm: sha256WithRSAEncryption<br>
<br>
Cipher used: ECDHE-RSA-AES256-GCM-SHA384 (256 bits)<span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
<br>
<br>
<pre>
</pre>
<pre class="m_4424276543708555576moz-signature" cols="72">--
sysadm <a href="http://cronomagic.com/gemstelecom.com" target="_blank">cronomagic.com/gemstelecom.com</a>
e-mail <a class="m_4424276543708555576moz-txt-link-abbreviated" href="mailto:ve2cii@canasoft.net" target="_blank">ve2cii@canasoft.net</a>
POWERED BY LINUX</pre>
</font></span></div>
<br>______________________________<wbr>_________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" rel="noreferrer" target="_blank">http://lists.xymon.com/<wbr>mailman/listinfo/xymon</a><br>
<br></blockquote></div><br></div>