Xymon Mailing List Archive search

Support for TLS v1.1 and 1.2?

list Ian Burrowes
Tue, 7 Jun 2016 08:58:23 +1000
Message-Id: <CAOna1OB0vt5Px5i-6r=user-8cd76a73521d@xymon.invalid>

Hi David,

This might not help at all, but when I had problems with xymon HTTPS and
SSL checks on my Win2012 R2 ADFS server recently, it was actually the
target website requiring Server Name Indication (SNI) support, rather than
a TLS 1.1 / 1.2 issue.  I was able to fix the problem by adding 'sni' on
the end of the host entry in hosts.cfg.

Please disregard this advice if not relevant, but perhaps it will help
others :)

Kind Regards,

Ian

On 7 June 2016 at 08:31, Gore, David W (David) via Xymon <xymon at xymon.com>
wrote:
---------- Forwarded message ----------
From: "Gore, David W (David)" <user-368fd67cc6bd@xymon.invalid>
To: "xymon at xymon.com" <xymon at xymon.com>
Cc:
Date: Mon, 6 Jun 2016 18:20:12 -0400
Subject: [Xymon] Support for TLS v1.1 and 1.2?

Mark Felder,


Mentioned last year around April 17th, 2015 where Xymon support for TLS
v1.1 and v1.2 may be lacking.  Perhaps the issue is more my naiveté but
does anyone know how I can get the sslcert and http tests to work correctly
with Apache and Xymon.


[image: red] https://xymon1.domain.com/ - SSL error


The sslcert test goes purple.


Os: Red Hat Enterprise Linux Server release 7.2 (Maipo)

Openssl: OpenSSL 1.0.1e-fips 11 Feb 2013

Xymon:  4.3.26


David W Gore