[Xymon] Updated SSL cert expiration date not refreshing

Phil Crooker Phil.Crooker at orix.com.au
Mon Dec 12 00:03:01 CET 2016


The old certificate is probably still enabled for a service somewhere - we had a similar issue where the old certificate was in fact enabled for a service but this was only evident after a reboot. Why don't you just remove it from the windows system? 
 

________________________________________
From: Xymon <xymon-bounces at xymon.com> on behalf of Tech Support <support at innovateteam.com>
Sent: Saturday, 10 December 2016 3:45 AM
To: Japheth Cleaver; Scot Kreienkamp; Xymon MailingList
Subject: Re: [Xymon] Updated SSL cert expiration date not refreshing

Yes, curl test is from Xymon server.

Yes, timestamp of Xymon test is current.

Xymon version 4.3.25
Ubuntu 16.04

Regarding SNI, the site in question is IIS, not Apache.  The cert is a
wildcard for our domain so it shows as *.domainname.com

Thank you.

------------------------------------------------

Kris Springer


Signature - Support
On 12/9/2016 8:49 AM, Japheth Cleaver wrote:
> Was the curl test done from the same Linux server as xymon or a
> different ont?
>
> Xymon's network tester (xymonnet) is completely re-executed for each
> run, so there's not very much that can be cached on the polling system
> that could cause it to return an older set. Is the test timestamp up
> to date on the actual test in question?
>
> Also: Which version of xymon are you running, and is the site using
> SNI by any chance?
>
> -jc
>
>
> On 12/9/2016 8:28 AM, Tech Support wrote:
>> The curl command shows the date accurately.
>>
>> Thank you.
>>
>> ------------------------------------------------
>>
>> Kris Springer
>>
>>
>> Signature - Support
>> On 12/9/2016 7:38 AM, Scot Kreienkamp wrote:
>>>
>>> What does it say for dates if you examine the cert with curl –v on
>>> the command line?
>>>
>>> *Scot Kreienkamp  | Senior Systems Engineer | La-Z-Boy Corporate*
>>> One La-Z-Boy Drive | Monroe, Michigan 48162 | Office: 734-384-6403 |
>>> | Mobile: 7349151444 | Email: Scot.Kreienkamp at la-z-boy.com
>>>
>>> *From:*Xymon [mailto:xymon-bounces at xymon.com] *On Behalf Of *Tech
>>> Support
>>> *Sent:* Friday, December 9, 2016 10:12 AM
>>> *To:* Xymon MailingList
>>> *Subject:* [Xymon] Updated SSL cert expiration date not refreshing
>>>
>>> I recently renewed some SSL certs for our domain.  Xymon was testing
>>> the https addresses and was correctly showing the ciphers and
>>> expiration date.  But after I renewed and applied the certs to our
>>> servers Xymon still shows the old expiration date on one of our IIS
>>> servers, not the new date.  The issue is only appearing when Xymon
>>> tests our IIS server, not a different Linux server which shows the
>>> correct updated date. The SSL certs were applied correctly to the
>>> IIS server and all browsers and external tests show accurate dates,
>>> but not Xymon.  Any idea why this would occur?  IIS server is
>>> running IIS 8.5
>>>
>>> Thanks.
>>> Kris Springer
>>>
>>>
>>
>> _______________________________________________
>> Xymon mailing list
>> Xymon at xymon.com
>> http://lists.xymon.com/mailman/listinfo/xymon
>
>

_______________________________________________
Xymon mailing list
Xymon at xymon.com
http://lists.xymon.com/mailman/listinfo/xymon




More information about the Xymon mailing list