Xymon Mailing List Archive search

Support for TLS v1.1 and 1.2?

list Henrik Størner
Tue, 7 Jun 2016 15:51:13 +0200
Message-Id: <user-f566f5a35b9f@xymon.invalid>

Hi David,

Xymon uses the openssl library on the Xymon server to do SSL/TLS. So the most basic of tests would be to run "openssl s_client -connect xymon1.domain.com:443" to see if your OpenSSL library supports the necessary protocols.

Note that you may have multiple versions of OpenSSL installed, so to be 100% sure check the version of OpenSSL that Xymon uses: "xymonnet --version" will tell you which OpenSSL version it was compiled with, and "ldd ~xymon/server/bin/xymonnet" will show you (on Linux, at least) what the actual library is that is used by xymonnet.


Regards,
Henrik


Den 07-06-2016 kl. 00:20 skrev Gore, David W (David):
Mark Felder,

Mentioned last year around April 17^th , 2015 where Xymon support for TLS v1.1 and v1.2 may be lacking.  Perhaps the issue is more my naiveté but does anyone know how I can get the sslcert and http tests to work correctly with Apache and Xymon.

red https://xymon1.domain.com/ - SSL error

The sslcert test goes purple.

Os: Red Hat Enterprise Linux Server release 7.2 (Maipo)

Openssl: OpenSSL 1.0.1e-fips 11 Feb 2013

Xymon:  4.3.26

David W Gore