Xymon Mailing List Archive search

SSL cert testing to match common name with host/URL?

list Buchan Milne
Wed, 16 Jun 2010 09:05:22 +0100
Message-Id: <user-faea97daa47f@xymon.invalid>

On Tuesday, 15 June 2010 19:55:24 Cleaver, Japheth wrote:
I've been adding testing of https URLs into our system and noticed that
 while the expiration date checking is nice, Xymon doesn't seem to be
 checking testing the common name at all for validity (in the manner that a
 browser might).
But, surely this isn't something you need to monitor? I mean, if you update a 
cert, you'll check it yourself (also to ensure that your client software has 
the relevant CA cert etc. etc.).

Regards,
Buchan