Xymon Mailing List Archive search

SSL Certificate test failure

list John Thurston
Tue, 10 Nov 2015 08:25:48 -0900
Message-Id: <user-5d37e09e6a1f@xymon.invalid>

On 11/10/2015 5:19 AM, J.C. Cleaver wrote:
- snip -
Agreed. xymonnet isn't doing a deep examination of the response, and isn't
testing against a matrix of possibilities. A few simple things might be
able to be added as a simple "httpcipher=" sort of thing, but our 'http'
syntax is already rather scarily overloaded and I'm not sure it's quite
the best solution there.
I agree. Certificate verification and validation is a complex subject 
and shouldn't be crammed into the HTTP tests. It ought to be handled in 
an ext script which meets your business needs.
-- 
    Do things because you should, not just because you can.

John Thurston    XXX-XXX-XXXX
user-ce4d79d99bab@xymon.invalid
Enterprise Technology Services
Department of Administration
State of Alaska