[Xymon] xymon checking wrong SSL cert on CNAME
    betsys at well.com 
    betsys at well.com
       
    Thu Jun 13 06:40:28 CEST 2024
    
    
  
Hi, 
We have a website at a third-party  hosting company, where our site
https://www.example.com <http://www.example.com>   is a cname for
something.hosting.com  (not the real name)
We have a LetsEncrypt cert issued for www.example.com
<http://www.example.com> .
 
The cert wasn't updating, but xymon did not alert , because xymon is
apparently evaluating the CNAME and then checking the cert for hosting.com
(which has a wildcard cert *.hosting.com)
 
How do we make xymon check the cert for www.example.com
<http://www.example.com>  , other than writing our own script? I think this
is a fairly common setup for hosted websites
(for a minute I thought about adding an A record but that would be wrong on
multiple levels) 
 
/home/xymon/server/etc/hosts.cfg has 
x.x.x.x  www.example.com # noconn httpstatus;http://www.example.com/;301;
https://www.example.com
 
(where x.x.x.x is the actual IP)
 
Running xymon 4.3.30 on Alma 8
 
Thanks very much! 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20240613/705fde27/attachment.htm>
    
    
More information about the Xymon
mailing list