Yes, there may be some specific or expired certificate, but workaround not working anyway,
Tested, using http3 does not help for CentOS and OpenSUSE 12.3
tested with URL: https://epak.pmlp.gov.lv/NYX.Nyx002.WebSite/Default.aspx
and some others.
Best regards,
Andrey Chervonets
SIA CoMinder
http://www.cominder.eu/
From: user-ce4a2c883f75@xymon.invalid
To: Andrey Chervonets <user-e7fb5c02322c@xymon.invalid>, Cc: <xymon at xymon.com>
Date: 25.07.2013 13:07
Subject: Re: XyMon 4.3.12 - what about HTTPS problems repoirted for 4.3.11 ?
Hi,
all indications are that this is an OpenSSL library problem (present in OpenSSL 1.x, but not in the older 0.9.x versions).
Debian has this bug report:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=702635
SuSE has this:
http://lists.opensuse.org/opensuse-bugs/2013-05/msg01048.html
It appears that the problem only shows up when testing sites with specific SSL implementations; e.g. I've seen it when connecting to some IIS versions.
Apparently, a work-around is to force the use of SSLv3 instead of TLSv1; you can do that by changing the URL in hosts.cfg so it has "https3" instead of just "https".
Regards,
Henrik
Den 25.07.2013 07:54, Andrey Chervonets skrev:
Good day!
I still not received any reply for my previous messages about https
tests problems in 4.3.11 or due openssl-1.0.nnnn.
Does 4.3.12 have fixes for that?
Or what should be the steps to find root cause and fix?
Just tell me in which direction should I go, I am not going to tale
much of Your time.
P.S. Really, I am surprised nobody else reported similar problems. I
fill I have done something wrong. :(