[Xymon] SSL Certs on servers with multiple virtualhosts

[John D. Alexander]

Henrik,

Have you been able to make any progress on the multiple ssl VirtualHost issue?

If need be, I can let apply the patch on a system that is reachable from outside and give you access (https) if I can get your IP address.

Thanks much

John Alexander


-----Original Message-----
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Henrik Størner
Sent: Wednesday, August 07, 2013 2:23 PM
To: xymon at xymon.com
Subject: Re: [Xymon] SSL Certs on servers with multiple virtualhosts

On 07-08-2013 19:56, John D. Alexander wrote:

> The website is private.  I've already rolled back the code but I can 
> reapply the patch and take screen shots if need be.
>
> Judging from the fact that Xymon was saying that the certificates 
> expired about 42 years ago, a couple of the programmers here indicate 
> that it's not picking up data from the certificate properly and 
> interpreting that as the epoch and counting forward from there for 
> expiration date.

Xymon uses the OpenSSL library routines to handle the SSL details, so I would be rather surprised if some kind of bogus certificate data got through all the way to the Xymon code - the openssl library is supposed to discard such invalid data and report an error.

More likely it is some kind of integer overflow. 15500 days before now is suspiciously close to Jan 1st 1970 (start of Unix epoch).

But it surprises me a bit, since I setup a test site here with two vhosts and different certificates, and the new code worked fine here - got the right certificate for each of the two hosts.

What version of OpenSSL are you running on the server where Xymon is compiled ? You can check by running "xymonnet --version".

I'll probably send you (directly, not via the list) a test-version of Xymon that logs some more debugging data for this - sometime later this week.


Regards,
Henrik

_______________________________________________
Xymon mailing list
Xymon at xymon.com
http://lists.xymon.com/mailman/listinfo/xymon