On Mon, Nov 9, 2015, at 15:18, Scot Kreienkamp wrote:
Hi there,
I am testing a site in Xymon that is testing OK, but throws an SSL error
in the browser. Wondering why that was, I looked at the certificate for
the site... it doesn't match the domain name of the site that's serving
it, which causes the browser to display an SSL error. I was expecting
Xymon to do the same. Apparently Xymon doesn't check to make sure the
certificate matches the URL.
Xymon doesn't check the chain of trust or validate the hostname of the
certificate. It will gladly tell you if it expires, though :)
It would be nice to teach Xymon to validate the certificate more
thoroughly.
--
Mark Felder
user-db141d317836@xymon.invalid