[Xymon] XyMon 4.3.12 - what about HTTPS problems repoirted for 4.3.11 ?

[Andrey Chervonets]

Yes, there may be some specific or expired certificate, 
but workaround not working anyway,

Tested, using http3 does not help for CentOS and OpenSUSE 12.3

tested with URL:  https://epak.pmlp.gov.lv/NYX.Nyx002.WebSite/Default.aspx
and some others.


Best regards,

Andrey Chervonets
----------------------
SIA CoMinder
http://www.cominder.eu/





From:   henrik at hswn.dk
To:     Andrey Chervonets <a.chervonets at cominder.eu>, 
Cc:     <xymon at xymon.com>
Date:   25.07.2013 13:07
Subject:        Re: XyMon 4.3.12 - what about HTTPS problems repoirted for 
4.3.11  ?



Hi,

all indications are that this is an OpenSSL library problem (present in 
OpenSSL 1.x, but not in the older 0.9.x versions).

Debian has this bug report:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702635

SuSE has this:
http://lists.opensuse.org/opensuse-bugs/2013-05/msg01048.html

It appears that the problem only shows up when testing sites with 
specific SSL implementations; e.g. I've seen it when connecting to some 
IIS versions.

Apparently, a work-around is to force the use of SSLv3 instead of 
TLSv1; you can do that by changing the URL in hosts.cfg so it has 
"https3" instead of just "https".

Regards,
Henrik


Den 25.07.2013 07:54, Andrey Chervonets skrev:
> Good day!
>
> I still not received any reply for my previous messages about https
> tests problems in 4.3.11 or due openssl-1.0.nnnn.
> Does 4.3.12 have fixes for that?
>
> Or what should be the steps to find root cause and fix?
> Just tell me in which direction should I go, I am not going to tale
> much of Your time.
>
> P.S. Really, I am surprised nobody else reported similar problems. I
> fill I have done something wrong. :(
>



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20130731/69d96c59/attachment.html>