Xymon Mailing List Archive search

XyMon 4.3.12 - what about HTTPS problems repoirted for 4.3.11 ?

list Andrey Chervonets
Wed, 31 Jul 2013 18:15:39 +0300
Message-Id: <user-c7cfbe519d63@xymon.invalid>

Yes, there may be some specific or expired certificate, but workaround not working anyway,

Tested, using http3 does not help for CentOS and OpenSUSE 12.3

tested with URL:  https://epak.pmlp.gov.lv/NYX.Nyx002.WebSite/Default.aspx
and some others.


Best regards,

Andrey Chervonets
SIA CoMinder
http://www.cominder.eu/


From:   user-ce4a2c883f75@xymon.invalid
To:     Andrey Chervonets <user-e7fb5c02322c@xymon.invalid>, Cc:     <xymon at xymon.com>
Date:   25.07.2013 13:07
Subject:        Re: XyMon 4.3.12 - what about HTTPS problems repoirted for 4.3.11  ?


Hi,

all indications are that this is an OpenSSL library problem (present in OpenSSL 1.x, but not in the older 0.9.x versions).

Debian has this bug report:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702635

SuSE has this:
http://lists.opensuse.org/opensuse-bugs/2013-05/msg01048.html

It appears that the problem only shows up when testing sites with specific SSL implementations; e.g. I've seen it when connecting to some IIS versions.

Apparently, a work-around is to force the use of SSLv3 instead of TLSv1; you can do that by changing the URL in hosts.cfg so it has "https3" instead of just "https".

Regards,
Henrik


Den 25.07.2013 07:54, Andrey Chervonets skrev:
Good day!

I still not received any reply for my previous messages about https
tests problems in 4.3.11 or due openssl-1.0.nnnn.
Does 4.3.12 have fixes for that?

Or what should be the steps to find root cause and fix?
Just tell me in which direction should I go, I am not going to tale
much of Your time.

P.S. Really, I am surprised nobody else reported similar problems. I
fill I have done something wrong. :(