[Xymon] sslcert

[SebA]

It's a separate tag - you need a space between sni and the URL.

On 9 January 2018 at 16:44, Frank <ve2cii at canasoft.net> wrote:

>     I tried this an no go.  Not sure if I am doing this correctly as the
> hosts.cfg file is
> not clear:
>
> https://www.thesweetbasket.com/en/;sni;
>
> sni;https://www.thesweetbasket.com/en/
>
>
> On 1/9/18 11:19, SebA wrote:
>
> Hi Frank,
>
> Xymon has picked up the certificate that is on https://66.159.47.82/ the
> IP address that www.thesweetbasket.com resolves to.  That certificate has
> indeed expired.  However, to get Xymon to test the certificate you are
> actually using, you need to enable sni.  Search for sni in the man page
> here: http://xymon.sourceforge.net/xymon/help/manpages/man5/
> hosts.cfg.5.html  But, the short answer is you can probably just add the
> sni tag to your host in hosts.cfg.
>
> Kind regards,  SebA
>
> On 9 January 2018 at 16:06, Frank <ve2cii at canasoft.net> wrote:
>
>>     Hi,
>>
>> This is for the sslcert service:
>>
>>     I have xymon monitoring a web site where the certificate has been
>> changed twice over
>> the past 2 years.  And it is currently up to date. What xymon is showing
>> for the dates
>> of the certificate are wrong.  Is there a way to fix this so it shows the
>> correct certificate
>> and not an old one?
>>
>> start date: 2014-12-02 19:29:50 GMT
>>     expire date:2015-04-01 19:29:50 GMT
>> Tue Jan 9 10:58:46 2018
>>
>>
>> red SSL certificate for https://www.thesweetbasket.com/en/ expired 1013
>> days ago
>>
>>
>> Server certificate:
>>     subject:/C=CA/ST=Que/L=Montreal/O=Cronomagic/OU=Web/CN=
>> serv1.thesweetbasket.com/emailAddress=frank at canasoft.net
>>     start date: 2014-12-02 19:29:50 GMT
>>     expire date:2015-04-01 19:29:50 GMT
>>     key size:1024
>>     issuer:/C=CA/ST=Que/L=Montreal/O=Cronomagic/OU=Web/CN=serv1.
>> thesweetbasket.com/emailAddress=frank at canasoft.net
>>     signature algorithm: sha256WithRSAEncryption
>>
>> Cipher used: ECDHE-RSA-AES256-GCM-SHA384 (256 bits)
>>
>>
>>
>>
>> --
>>
>> sysadm  cronomagic.com/gemstelecom.com
>> e-mail  ve2cii at canasoft.net
>>
>> POWERED BY LINUX
>>
>>
>> _______________________________________________
>> Xymon mailing list
>> Xymon at xymon.com
>> http://lists.xymon.com/mailman/listinfo/xymon
>>
>>
>
> --
>
> sysadm  cronomagic.com/gemstelecom.com
> e-mail  ve2cii at canasoft.net
>
> POWERED BY LINUX
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20180109/1f8d8c1c/attachment.html>