[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [xymon] sslcert
- To: xymon (at) xymon.com
- Subject: Re: [xymon] sslcert
- From: Ryan Novosielski <novosirj (at) umdnj.edu>
- Date: Fri, 21 Jan 2011 12:22:29 -0500
- Organization: UMDNJ
- References: <ihabli$op1$1 (at) voodoo.hswn.dk> <1295462714.2946.8.camel (at) Nokia-N900> <2685F464D7BC7C4DA88845C97AEB5F533A9AEA37B1 (at) qtomaexmbm22.AD.QINTRA.COM> <4D374E08.8030908 (at) makelofine.org> <ihabli$op1$1 (at) voodoo.hswn.dk> <f5c836b418c685568231ab13aa6b4c2f.squirrel (at) epperson.homelinux.net> <ihcf3p$23n$1 (at) voodoo.hswn.dk>
- User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100802 Lightning/1.0b2 Thunderbird/3.1.2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 1/21/2011 12:17 PM, Henrik Størner wrote:
> In <f5c836b418c685568231ab13aa6b4c2f.squirrel (at) epperson.homelinux.net> "Xymon User in Richmond" <hobbit (at) epperson.homelinux.net> writes:
>
>> On Thu, January 20, 2011 17:06, Henrik Størner wrote:
>>> OK, so you have (at least) 7 SSL-enabled services running on one host.
>>> The effect of that is rather unpredictable - when doing the "sslcert"
>>> status, I didn't think that you would have one line in hosts.cfg with
>>> multiple (different) SSL certificates. So which of the 7 certificates
>>> will show up in the "sslcert" status is unpredictable.
>>>
>
>> I have hosts running both httpd ssl and imaps services, with separate
>> certs, and it reports both certs correctly. I don't know if it will
>> handle status correctly, though. The imaps certs are self-generated with
>> expirations years out. IIRC, it has gone yellow on the httpd certs at the
>> correct time. The https test precedes the imaps test on the hosts line,
>> and the certs are stacked in that order on the sslcert page.
>
> I stand corrected, then - apparently I did foresee that possibility :-)
It's perfectly reasonable -- you'll run into that with any webserver
providing https that also provides imap-s, which is not that outlandish.
- --
- ---- _ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer
|$&| |__| | | |__/ | \| _| |novosirj (at) umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk05wNUACgkQmb+gadEcsb7d8gCdHvGKZdqGid4NBpSVaII5l2CB
vnUAoNCanVKkhURwyTNxRvxjF4F10DsL
=NJsu
-----END PGP SIGNATURE-----