Xymon Mailing List Archive search

SSL Errors

list Vernon Everett
Tue, 9 Dec 2014 07:42:00 +0800
Message-Id: <user-276201e0d9ad@xymon.invalid>

Hi Scott

All I get is a new error message. :-(

https3

Unspecified SSL error in SSL_connect to 47873/tcp on host 1.2.3.4:
error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number


httpt

Unspecified SSL error in SSL_connect to 47873/tcp on host 1.2.3.4:
error:1411809D:SSL routines:SSL_CHECK_SERVERHELLO_TLSEXT:tls invalid
ecpointformat list


And the https status remains red.


Regards

Vernon


On 8 December 2014 at 20:50, Scott Pfister <user-3f57de7c453d@xymon.invalid> wrote:
Good morning,

What version of SSL is on the client with the cert? ? Was SSLv3 disabled
due to poodle exploit? Can you try forcing it to connect using only TLS or
SSLv3? In host.cfg set https3://... or  httpst://...

thanks


On Mon, Dec 8, 2014 at 4:33 AM, Vernon Everett <user-b3f8dacb72c8@xymon.invalid>
wrote:
Hi all

Trying to get an https test working to monitor certificate expiry.
Test shows up red, with very descriptive "SSL Error".

The xymonnet error appears a little more useful, but I can't find a
resolution to the problem.
Unspecified SSL error in SSL_connect to 47873/tcp on host  1.2.3.4:
error:1411809D:SSL routines:SSL_CHECK_SERVERHELLO_TLSEXT:tls invalid
ecpointformat list

Additional info.

xymonnet version 4.3.17

SSL library : OpenSSL 1.0.1j 15 Oct 2014

LDAP library: OpenLDAP 20423

Any advice appreciated.

Regards
Vernon

--
"Accept the challenges so that you can feel the exhilaration of victory"
- General George Patton

-- 
"Accept the challenges so that you can feel the exhilaration of victory"
- General George Patton