[Xymon] OpenSSL Errors for some https tests

[Michael Gallen]

Problem solved,
Thanks Henrik for pointing me in the right direction

I used a Xymon option to force https tests to use SSLv3
When using auto or SSLv2 the SSL connections would fail to some systems.
In hosts.cfg the URL would be https3://wiki.local.com

Regards,
Michael


-----Original Message-----
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Henrik Størner
Sent: September 17, 2012 5:20 PM
To: xymon at xymon.com
Subject: Re: [Xymon] OpenSSL Errors for some https tests

On 17-09-2012 22:40, Michael Gallen wrote:
> I am migrating from Hobbit 4.2.0 on CentOS 5.5 to Xymon 4.3.9 on CentOS 6.2
>
> Everything works fine on CentOS 5.5 but on CentOS 6.2 we get SSL errors
> for some of our https sites.
>
> Some https sites test ok, others always fail.
>
> Hobbit uses openssl 0.9.8e-12.el5_5.7
>
> Xymon uses openssl 1.0.0-25.el6_3.1
>
> The error also displays when testing with wget and openssl -debug,
> please see below..

OK, so you've narrowed it down to the change of openssl version, not the
Hobbit/Xymon upgrade.

> OpenSSL: error:140773F2:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
> unexpected message
>
> Unable to establish SSL connection.

I don't know if CentOS did, but the Ubuntu version of OpenSSL - perhaps
also Debian - disabled support for SSLv2 somewhere between 0.9.8 and
1.0. Could this be the reason - that your failing site only supports the
older SSLv2 protocol ?

You can also try forcing it to connect using only TLS or only SSLv3
(there are some openssl options for that). Perhaps one of those work?


Regards,
Henrik

_______________________________________________
Xymon mailing list
Xymon at xymon.com
http://lists.xymon.com/mailman/listinfo/xymon

________________________________

Disclaimer: This email message and any attachments are for the sole use of the intended recipient(s) and may contain information that is confidential, legally privileged or otherwise exempt from disclosure under applicable law. If you are not the intended recipient(s) or have received this message in error, you are instructed to immediately notify the sender by return email and required to delete this message from your computer system. This communication does not form any contractual obligation on behalf of the sender, the sender's employer or such employer's parent company, affiliates or subsidiaries.