[Xymon] sslcert

SebA spah at syntec.co.uk
Tue Jan 9 17:41:48 CET 2018


Your Windows machine +  Chrome is using SNI.

On 9 January 2018 at 16:25, Josh Luthman <josh at imaginenetworksllc.com>
wrote:

> My Windows machine + Chrome believes that certificate is good until 2019...
>
> https://i.imgur.com/JiSHntT.png
>
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> <https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373&entry=gmail&source=g>
> Suite 1337
> <https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373&entry=gmail&source=g>
> Troy, OH 45373
> <https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373&entry=gmail&source=g>
>
> On Tue, Jan 9, 2018 at 11:19 AM, SebA <spah at syntec.co.uk> wrote:
>
>> Hi Frank,
>>
>> Xymon has picked up the certificate that is on https://66.159.47.82/ the
>> IP address that www.thesweetbasket.com resolves to.  That certificate
>> has indeed expired.  However, to get Xymon to test the certificate you are
>> actually using, you need to enable sni.  Search for sni in the man page
>> here: http://xymon.sourceforge.net/xymon/help/manpages/man5/hosts.
>> cfg.5.html  But, the short answer is you can probably just add the sni
>> tag to your host in hosts.cfg.
>>
>> Kind regards,  SebA
>>
>> On 9 January 2018 at 16:06, Frank <ve2cii at canasoft.net> wrote:
>>
>>>     Hi,
>>>
>>> This is for the sslcert service:
>>>
>>>     I have xymon monitoring a web site where the certificate has been
>>> changed twice over
>>> the past 2 years.  And it is currently up to date. What xymon is showing
>>> for the dates
>>> of the certificate are wrong.  Is there a way to fix this so it shows
>>> the correct certificate
>>> and not an old one?
>>>
>>> start date: 2014-12-02 19:29:50 GMT
>>>     expire date:2015-04-01 19:29:50 GMT
>>> Tue Jan 9 10:58:46 2018
>>>
>>>
>>> red SSL certificate for https://www.thesweetbasket.com/en/ expired 1013
>>> days ago
>>>
>>>
>>> Server certificate:
>>>     subject:/C=CA/ST=Que/L=Montreal/O=Cronomagic/OU=Web/CN=serv1
>>> .thesweetbasket.com/emailAddress=frank at canasoft.net
>>>     start date: 2014-12-02 19:29:50 GMT
>>>     expire date:2015-04-01 19:29:50 GMT
>>>     key size:1024
>>>     issuer:/C=CA/ST=Que/L=Montreal/O=Cronomagic/OU=Web/CN=serv1.
>>> thesweetbasket.com/emailAddress=frank at canasoft.net
>>>     signature algorithm: sha256WithRSAEncryption
>>>
>>> Cipher used: ECDHE-RSA-AES256-GCM-SHA384 (256 bits)
>>>
>>>
>>>
>>>
>>> --
>>>
>>> sysadm  cronomagic.com/gemstelecom.com
>>> e-mail  ve2cii at canasoft.net
>>>
>>> POWERED BY LINUX
>>>
>>>
>>> _______________________________________________
>>> Xymon mailing list
>>> Xymon at xymon.com
>>> http://lists.xymon.com/mailman/listinfo/xymon
>>>
>>>
>>
>> _______________________________________________
>> Xymon mailing list
>> Xymon at xymon.com
>> http://lists.xymon.com/mailman/listinfo/xymon
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180109/be14f3bd/attachment.html>


More information about the Xymon mailing list