Xymon Mailing List Archive search

Intermediate cert monitoring

list Eli
Thu, 26 Feb 2015 11:50:43 -0700
Message-Id: <user-bde842682ce9@xymon.invalid>

The issue was missing or not installed. As you know newer browsers doesn't have problem but the older one show cert error when the intermediate cert missing. We have bunch of cert so some time engineers forget to install the intermediate cert and caused issue.  

Mark Felder <user-db141d317836@xymon.invalid> wrote:
What was the exact problem with the intermediate certificate? What
should be monitored? Maybe we can come up with a way to add additional
monitoring parameters to Xymon's SSL monitoring if we know exactly what
should be monitored.

My first guess is expiration, but I'm not sure if you can sign a cert if
it expires after your intermediate is due to expire. The only other
thought is if the chain was incomplete...