[Xymon] SSL problems with xymon

[Jeremy]

Hi Leif,

I recently has the same problem and the solution was to put sni on for 
that host.

I couldn't get it to work in hosts.cfg, don't know what I was doing 
wrong, so I added --sni=on to the CMD for xymonnet in tasks.cfg.

Regards

Jeremy

------ Original Message ------
From: "Leif Sommerdal" <lso at ufm.dk>
To: "xymon at xymon.com" <xymon at xymon.com>
Sent: 22/11/2019 09:14:22
Subject: [Xymon] SSL problems with xymon

>Recently I got an error with a perfectly valid certificate in xymon.
>
>
>
>Xymon reports
>
>
>
>
>
>red Fri Nov 22 09:50:20 2019: SSL error
>
>
>
>red https://www.su.dk/ - SSL error
>
>
>
>Seconds: 0.261158000
>
>
>
>Trying  to access the site using firefox from Xymon server doesn’t 
>report any error:
>
>
>
>
>
>
>  Testing the certificate using openssl doesn't look right:
>
>
>
>
>echo| openssl s_client -connect www.su.dk:443 <http://www.su.dk:443>
>
>CONNECTED(00000003)
>write:errno=104
>---
>no peer certificate available
>---
>No client certificate CA names sent
>---
>SSL handshake has read 0 bytes and written 289 bytes
>---
>New, (NONE), Cipher is (NONE)
>Secure Renegotiation IS NOT supported
>Compression: NONE
>Expansion: NONE
>No ALPN negotiated
>SSL-Session:
>     Protocol  : TLSv1.2
>     Cipher    : 0000
>     Session-ID:
>     Session-ID-ctx:
>     Master-Key:
>     Key-Arg   : None
>     Krb5 Principal: None
>     PSK identity: None
>     PSK identity hint: None
>     Start Time: 1574412455
>     Timeout   : 300 (sec)
>     Verify return code: 0 (ok)
>
>Testing other sites using the same method works fine for other sites.
>
>
>
>What can I do to solve this problem? How do I proceed?
>
>If I'm missing some information - pease let med know.
>
>
>
>
>
>Med venlig hilsen/Kind Regards
>
>
>
>Leif Sommerdal
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20191122/b7bd8c8e/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 61853 bytes
Desc: not available
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20191122/b7bd8c8e/attachment.png>