sslcert 🔗 link

-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 12:45 PM
To: xymon at xymon.com
Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata running SSLed services. The tests are all OK. But when I go to sslcert test page, I see the information from another host (called toto). Their SSL certificates are differents, and all my other hosts have their own SSL informations. The host toto is the xymon server itself, running xymon-4.3.0-beta3 client and server. The host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards,
Damien

-----Original Message-----
From: Root, Paul [mailto:user-c80045f511e8@xymon.invalid]
Sent: Wednesday, January 19, 2011 2:06 PM
To: 'xymon at xymon.com'
Subject: RE: [xymon] sslcert

What do your lines in hosts.cfg look like for these two servers?


Paul Root
Lead Internet Systems Eng
Qwest Network Services


-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 12:45 PM
To: xymon at xymon.com
Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata running
SSLed services. The tests are all OK. But when I go to sslcert test page,
I see the information from another host (called toto). Their SSL
certificates are differents, and all my other hosts have their own SSL

Thank for any help.

Regards,
Damien


This communication is the property of Qwest and may contain confidential
or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

Le 19/01/2011 20:52, Rob Munsch a écrit :

I am going to be no help here, but as a long-time sysadmin I'd just like to note that I would kill for Paul's name.

-----Original Message-----
From: Root, Paul [mailto:user-c80045f511e8@xymon.invalid]
Sent: Wednesday, January 19, 2011 2:06 PM
To: 'xymon at xymon.com'
Subject: RE: [xymon] sslcert

What do your lines in hosts.cfg look like for these two servers?


Paul Root
Lead Internet Systems Eng
Qwest Network Services


-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 12:45 PM
To: xymon at xymon.com
Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata running
SSLed services. The tests are all OK. But when I go to sslcert test page,
I see the information from another host (called toto). Their SSL
certificates are differents, and all my other hosts have their own SSL
informations. The host toto is the xymon server itself, running xymon-
4.3.0-beta3 client and server. The host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards,
Damien


This communication is the property of Qwest and may contain confidential
or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

Le 19/01/2011 20:06, Root, Paul a écrit :

What do your lines in hosts.cfg look like for these two servers?


Paul Root
Lead Internet Systems Eng
Qwest Network Services


-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 12:45 PM
To: xymon at xymon.com
Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata running SSLed services. The tests are all OK. But when I go to sslcert test page, I see the information from another host (called toto). Their SSL certificates are differents, and all my other hosts have their own SSL informations. The host toto is the xymon server itself, running xymon-4.3.0-beta3 client and server. The host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards,
Damien


This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

Paul Root
Lead Internet Systems Eng
Qwest Network Services


-----Original Message-----
From: Rob Munsch [mailto:user-d560979fab41@xymon.invalid]
Sent: Wednesday, January 19, 2011 1:53 PM
To: xymon at xymon.com
Subject: RE: [xymon] sslcert

I am going to be no help here, but as a long-time sysadmin I'd just like to note that I would kill for Paul's name.

-----Original Message-----
From: Root, Paul [mailto:user-c80045f511e8@xymon.invalid]
Sent: Wednesday, January 19, 2011 2:06 PM
To: 'xymon at xymon.com'
Subject: RE: [xymon] sslcert

What do your lines in hosts.cfg look like for these two servers?


Paul Root
Lead Internet Systems Eng
Qwest Network Services


-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 12:45 PM
To: xymon at xymon.com
Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata running
SSLed services. The tests are all OK. But when I go to sslcert test page,
I see the information from another host (called toto). Their SSL
certificates are differents, and all my other hosts have their own SSL
informations. The host toto is the xymon server itself, running xymon-
4.3.0-beta3 client and server. The host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards,
Damien


This communication is the property of Qwest and may contain confidential
or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

Paul Root
Lead Internet Systems Eng
Qwest Network Services


-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 2:48 PM
To: xymon at xymon.com
Subject: Re: [xymon] sslcert

Le 19/01/2011 20:06, Root, Paul a écrit :

What do your lines in hosts.cfg look like for these two servers?
-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 12:45 PM
To: xymon at xymon.com
Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata running SSLed services. The tests are all OK. But when I go to sslcert test page, I see the information from another host (called toto). Their SSL certificates are differents, and all my other hosts have their own SSL informations. The host toto is the xymon server itself, running xymon-4.3.0-beta3 client and server. The host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards,
Damien

Here is the hosts.cfg content :
127.0.0.1   toto    # bbd ftp http://wikileaks.makelofine.org
https://wikileaks.makelofine.org http://www.raclo.fr
http://www.pleinphares.fr http://www.xenon-tuning.fr
http://www.hoodmark.fr http://www.chasseresse.com
https://mailadmin.makelofine.org https://www.makelofine.org
http://www.skapiso.com http://www.galey-ariege.fr
http://photos.makelofine.org http://www.warcho.net
https://test.makelofine.org
dns=galey-ariege.fr,skapiso.com,loozah.com,manurevah.com,loloack.com,makelofine.org
smtp ssh imap imaps pop3 smtps pop3s apt
apache=http://localhost/server-status?auto libs bind postfix mysql
hardware ntpq
TRENDS:*,!la,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5,apache:apache|apache1|apache2|apache3,mysql:mysql|mysqlslow|mysqlqueries|mysqltables|mysqlopens|mysqlflush|mysqlquestions,hardware:hardware|fans|voltages,mailgraph:mailgraph-rejected|mailgraph-local|mailgraph-amavis|mailgraph-spamd|mailgraph-postgrey|mailgraph-postgrey-passed|mailgraph-loglines|mailgraph-runtime

1.2.3.4 tata # DESCR:"server:Serveur Linux" smtp imap imaps bind pop3
pop3s postfix libs
TRENDS:*,inode,ntpstat,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5,disk:disk|iostat-disk|iostat-part,mailgraph:mailgraph-rejected|mailgraph-local|mailgraph-amavis|mailgraph-spamd|mailgraph-postgrey|mailgraph-postgrey-passed|mailgraph-loglines|mailgraph-runtime,mysql:mysql|mysqlslow|mysqlqueries|mysqltables|mysqlopens|mysqlflush|mysqlquestions
samba ntpq ssh


This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

On Thu, January 20, 2011 11:10, Root, Paul wrote:

That's a lot of stuff on each line.  I've never done multiple URLs on a
single host. What does that do for you?

I put the URL on the line of the server.

Is tata by chance the real host of one of the URLs you put on the toto
line?


Paul Root Lead Internet Systems Eng Qwest Network Services


-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011 2:48 PM
To: xymon at xymon.com Subject: Re: [xymon] sslcert

Le 19/01/2011 20:06, Root, Paul a écrit :

What do your lines in hosts.cfg look like for these two servers?
-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011 12:45
PM To: xymon at xymon.com Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata
running SSLed services. The tests are all OK. But when I go to sslcert
test page, I see the information from another host (called toto). Their
 SSL certificates are differents, and all my other hosts have their own
 SSL informations. The host toto is the xymon server itself, running
xymon-4.3.0-beta3 client and server. The host 'tata' is running xymon
4.2.2.

Thank for any help.

Regards, Damien

Here is the hosts.cfg content : 127.0.0.1   toto    # bbd ftp
http://wikileaks.makelofine.org https://wikileaks.makelofine.org
http://www.raclo.fr http://www.pleinphares.fr http://www.xenon-tuning.fr
http://www.hoodmark.fr http://www.chasseresse.com
https://mailadmin.makelofine.org https://www.makelofine.org
http://www.skapiso.com http://www.galey-ariege.fr
http://photos.makelofine.org http://www.warcho.net
https://test.makelofine.org

1.2.3.4 tata # DESCR:"server:Serveur Linux" smtp imap imaps bind pop3
pop3s postfix libs

This communication is the property of Qwest and may contain confidential
or privileged information. Unauthorized use of this communication is
strictly prohibited and may be unlawful.  If you have received this
communication in error, please immediately notify the sender by reply
e-mail and destroy all copies of the communication and any attachments.

Le 20/01/2011 17:10, Root, Paul a écrit :

That's a lot of stuff on each line.  I've never done multiple URLs on a single host. What does that do for you?

I put the URL on the line of the server.

Is tata by chance the real host of one of the URLs you put on the toto line?


Paul Root
Lead Internet Systems Eng
Qwest Network Services


-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 2:48 PM
To: xymon at xymon.com
Subject: Re: [xymon] sslcert

Le 19/01/2011 20:06, Root, Paul a écrit :

What do your lines in hosts.cfg look like for these two servers?
-----Original Message-----
From: dOCtoR MADneSs [mailto:user-d54077869176@xymon.invalid]
Sent: Wednesday, January 19, 2011 12:45 PM
To: xymon at xymon.com
Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata running SSLed services. The tests are all OK. But when I go to sslcert test page, I see the information from another host (called toto). Their SSL certificates are differents, and all my other hosts have their own SSL informations. The host toto is the xymon server itself, running xymon-4.3.0-beta3 client and server. The host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards,
Damien

Here is the hosts.cfg content :
127.0.0.1   toto    # bbd ftp http://wikileaks.makelofine.org
https://wikileaks.makelofine.org http://www.raclo.fr
http://www.pleinphares.fr http://www.xenon-tuning.fr
http://www.hoodmark.fr http://www.chasseresse.com
https://mailadmin.makelofine.org https://www.makelofine.org
http://www.skapiso.com http://www.galey-ariege.fr
http://photos.makelofine.org http://www.warcho.net
https://test.makelofine.org
dns=galey-ariege.fr,skapiso.com,loozah.com,manurevah.com,loloack.com,makelofine.org
smtp ssh imap imaps pop3 smtps pop3s apt
apache=http://localhost/server-status?auto libs bind postfix mysql
hardware ntpq
TRENDS:*,!la,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5,apache:apache|apache1|apache2|apache3,mysql:mysql|mysqlslow|mysqlqueries|mysqltables|mysqlopens|mysqlflush|mysqlquestions,hardware:hardware|fans|voltages,mailgraph:mailgraph-rejected|mailgraph-local|mailgraph-amavis|mailgraph-spamd|mailgraph-postgrey|mailgraph-postgrey-passed|mailgraph-loglines|mailgraph-runtime

1.2.3.4 tata # DESCR:"server:Serveur Linux" smtp imap imaps bind pop3
pop3s postfix libs
TRENDS:*,inode,ntpstat,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5,disk:disk|iostat-disk|iostat-part,mailgraph:mailgraph-rejected|mailgraph-local|mailgraph-amavis|mailgraph-spamd|mailgraph-postgrey|mailgraph-postgrey-passed|mailgraph-loglines|mailgraph-runtime,mysql:mysql|mysqlslow|mysqlqueries|mysqltables|mysqlopens|mysqlflush|mysqlquestions
samba ntpq ssh


This communication is the property of Qwest and may contain confidential or
privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.

Le 20/01/2011 17:52, Xymon User in Richmond a écrit :

So, the real root top-posts.  ;)

Yeah, that looks funny to me, too.  Using a bb-hosts/hosts.cfg line to
test URLs not on that server is probably a novel way to test external
stuff and group it all together.  toto's sslcert page should be showing
four external certs plus the local imaps and pop3s certs.  Assuming that's
really all one line--I don't see any "\" escapes.

But the issue reported is with a different line.  tata should be showing
its imap2 and pop3s certs, unless they're the same in which case it would
be listed once.  I assume we're quite certain that toto and tata don't use
the same pops/imaps certs.

Which certs from toto is tata reporting?  Just its own pops/imaps, or all
of them including the ones from the external https URLs?  I assume we're
quite certain that toto and tata don't use the same pops/imaps certs.


On Thu, January 20, 2011 11:10, Root, Paul wrote:

That's a lot of stuff on each line.  I've never done multiple URLs on a
single host. What does that do for you?

I put the URL on the line of the server.

Is tata by chance the real host of one of the URLs you put on the toto
line?


Paul Root Lead Internet Systems Eng Qwest Network Services


-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011 2:48 PM
To: xymon at xymon.com Subject: Re: [xymon] sslcert

Le 19/01/2011 20:06, Root, Paul a écrit :

What do your lines in hosts.cfg look like for these two servers?
-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011 12:45
PM To: xymon at xymon.com Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata
running SSLed services. The tests are all OK. But when I go to sslcert
test page, I see the information from another host (called toto). Their
 SSL certificates are differents, and all my other hosts have their own
 SSL informations. The host toto is the xymon server itself, running
xymon-4.3.0-beta3 client and server. The host 'tata' is running xymon
4.2.2.

Thank for any help.

Regards, Damien

Here is the hosts.cfg content : 127.0.0.1   toto    # bbd ftp
http://wikileaks.makelofine.org https://wikileaks.makelofine.org
http://www.raclo.fr http://www.pleinphares.fr http://www.xenon-tuning.fr
http://www.hoodmark.fr http://www.chasseresse.com
https://mailadmin.makelofine.org https://www.makelofine.org
http://www.skapiso.com http://www.galey-ariege.fr
http://photos.makelofine.org http://www.warcho.net
https://test.makelofine.org
dns=galey-ariege.fr,skapiso.com,loozah.com,manurevah.com,loloack.com,make
lofine.org smtp ssh imap imaps pop3 smtps pop3s apt
apache=http://localhost/server-status?auto libs bind postfix mysql
hardware ntpq
TRENDS:*,!la,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5,apache:apache
|apache1|apache2|apache3,mysql:mysql|mysqlslow|mysqlqueries|mysqltables|m
ysqlopens|mysqlflush|mysqlquestions,hardware:hardware|fans|voltages,mailg
raph:mailgraph-rejected|mailgraph-local|mailgraph-amavis|mailgraph-spamd|
mailgraph-postgrey|mailgraph-postgrey-passed|mailgraph-loglines|mailgraph
-runtime

1.2.3.4 tata # DESCR:"server:Serveur Linux" smtp imap imaps bind pop3
pop3s postfix libs
TRENDS:*,inode,ntpstat,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5,dis
k:disk|iostat-disk|iostat-part,mailgraph:mailgraph-rejected|mailgraph-loc
al|mailgraph-amavis|mailgraph-spamd|mailgraph-postgrey|mailgraph-postgrey
-passed|mailgraph-loglines|mailgraph-runtime,mysql:mysql|mysqlslow|mysqlq
ueries|mysqltables|mysqlopens|mysqlflush|mysqlquestions samba ntpq ssh


This communication is the property of Qwest and may contain confidential
or privileged information. Unauthorized use of this communication is
strictly prohibited and may be unlawful.  If you have received this
communication in error, please immediately notify the sender by reply
e-mail and destroy all copies of the communication and any attachments.

On Thu, January 20, 2011 12:35, dOCtoR MADneSs wrote:

Le 20/01/2011 17:52, Xymon User in Richmond a écrit :

On Thu, January 20, 2011 11:10, Root, Paul wrote:

That's a lot of stuff on each line.  I've never done multiple URLs on
a single host. What does that do for you?

I put the URL on the line of the server.

Is tata by chance the real host of one of the URLs you put on the
toto line?


Paul Root Lead Internet Systems Eng Qwest Network Services


-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011 2:48
 PM To: xymon at xymon.com Subject: Re: [xymon] sslcert

Le 19/01/2011 20:06, Root, Paul a écrit :

What do your lines in hosts.cfg look like for these two servers?
-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011
12:45 PM To: xymon at xymon.com Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata
running SSLed services. The tests are all OK. But when I go to
sslcert test page, I see the information from another host (called
toto). Their SSL certificates are differents, and all my other
hosts have their own SSL informations. The host toto is the xymon
server itself, running xymon-4.3.0-beta3 client and server. The
host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards, Damien

Here is the hosts.cfg content : 127.0.0.1   toto    # bbd ftp
http://wikileaks.makelofine.org https://wikileaks.makelofine.org
http://www.raclo.fr http://www.pleinphares.fr
http://www.xenon-tuning.fr http://www.hoodmark.fr
http://www.chasseresse.com https://mailadmin.makelofine.org
https://www.makelofine.org http://www.skapiso.com
http://www.galey-ariege.fr http://photos.makelofine.org
http://www.warcho.net https://test.makelofine.org

1.2.3.4 tata # DESCR:"server:Serveur Linux" smtp imap imaps bind pop3
 pop3s postfix libs

So, the real root top-posts.  ;)

Yeah, that looks funny to me, too.  Using a bb-hosts/hosts.cfg line to
test URLs not on that server is probably a novel way to test external
stuff and group it all together.  toto's sslcert page should be showing
 four external certs plus the local imaps and pop3s certs.  Assuming
that's really all one line--I don't see any "\" escapes.

But the issue reported is with a different line.  tata should be
showing its imap2 and pop3s certs, unless they're the same in which
case it would be listed once.  I assume we're quite certain that toto
and tata don't use the same pops/imaps certs.

Which certs from toto is tata reporting?  Just its own pops/imaps, or
all of them including the ones from the external https URLs?  I assume
we're quite certain that toto and tata don't use the same pops/imaps
certs.

tata reports SSL certs from toto for imaps and pop3s. Actually, tata does
not run any other SSL service.

Le 20/01/2011 20:00, Xymon User in Richmond a écrit :

On Thu, January 20, 2011 12:35, dOCtoR MADneSs wrote:

Le 20/01/2011 17:52, Xymon User in Richmond a écrit :

On Thu, January 20, 2011 11:10, Root, Paul wrote:

That's a lot of stuff on each line.  I've never done multiple URLs on
a single host. What does that do for you?

I put the URL on the line of the server.

Is tata by chance the real host of one of the URLs you put on the
toto line?


Paul Root Lead Internet Systems Eng Qwest Network Services


-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011 2:48
 PM To: xymon at xymon.com Subject: Re: [xymon] sslcert

Le 19/01/2011 20:06, Root, Paul a écrit :

What do your lines in hosts.cfg look like for these two servers?
-----Original Message----- From: dOCtoR MADneSs
[mailto:user-d54077869176@xymon.invalid] Sent: Wednesday, January 19, 2011
12:45 PM To: xymon at xymon.com Subject: [xymon] sslcert

Hi

My xymon server has a strange behaviour.I have a host called tata
running SSLed services. The tests are all OK. But when I go to
sslcert test page, I see the information from another host (called
toto). Their SSL certificates are differents, and all my other
hosts have their own SSL informations. The host toto is the xymon
server itself, running xymon-4.3.0-beta3 client and server. The
host 'tata' is running xymon 4.2.2.

Thank for any help.

Regards, Damien

Here is the hosts.cfg content : 127.0.0.1   toto    # bbd ftp
http://wikileaks.makelofine.org https://wikileaks.makelofine.org
http://www.raclo.fr http://www.pleinphares.fr
http://www.xenon-tuning.fr http://www.hoodmark.fr
http://www.chasseresse.com https://mailadmin.makelofine.org
https://www.makelofine.org http://www.skapiso.com
http://www.galey-ariege.fr http://photos.makelofine.org
http://www.warcho.net https://test.makelofine.org
dns=galey-ariege.fr,skapiso.com,loozah.com,manurevah.com,loloack.com,
make lofine.org smtp ssh imap imaps pop3 smtps pop3s apt
apache=http://localhost/server-status?auto libs bind postfix mysql
hardware ntpq
TRENDS:*,!la,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5,apache:ap
ache
|apache1|apache2|apache3,mysql:mysql|mysqlslow|mysqlqueries|mysqltabl
es|m
ysqlopens|mysqlflush|mysqlquestions,hardware:hardware|fans|voltages,m
ailg
raph:mailgraph-rejected|mailgraph-local|mailgraph-amavis|mailgraph-sp
amd|
mailgraph-postgrey|mailgraph-postgrey-passed|mailgraph-loglines|mailg
raph -runtime

1.2.3.4 tata # DESCR:"server:Serveur Linux" smtp imap imaps bind pop3
 pop3s postfix libs
TRENDS:*,inode,ntpstat,vmstat:vmstat1|vmstat2|vmstat3|vmstat4|vmstat5
,dis
k:disk|iostat-disk|iostat-part,mailgraph:mailgraph-rejected|mailgraph
-loc
al|mailgraph-amavis|mailgraph-spamd|mailgraph-postgrey|mailgraph-post
grey
-passed|mailgraph-loglines|mailgraph-runtime,mysql:mysql|mysqlslow|my
sqlq ueries|mysqltables|mysqlopens|mysqlflush|mysqlquestions samba
ntpq ssh

So, the real root top-posts.  ;)

Yeah, that looks funny to me, too.  Using a bb-hosts/hosts.cfg line to
test URLs not on that server is probably a novel way to test external
stuff and group it all together.  toto's sslcert page should be showing
 four external certs plus the local imaps and pop3s certs.  Assuming
that's really all one line--I don't see any "\" escapes.

But the issue reported is with a different line.  tata should be
showing its imap2 and pop3s certs, unless they're the same in which
case it would be listed once.  I assume we're quite certain that toto
and tata don't use the same pops/imaps certs.

Which certs from toto is tata reporting?  Just its own pops/imaps, or
all of them including the ones from the external https URLs?  I assume
we're quite certain that toto and tata don't use the same pops/imaps
certs.

tata reports SSL certs from toto for imaps and pop3s. Actually, tata does
not run any other SSL service.

Bottom-post to top-post and back again gets kinda weird. But I try to go
with the flow (ever since one of our crustier participants unloaded on me
for grousing).

The tata thing is also pretty weird.  I've tried mucking around with a
sandbox setup trying to replicate it, and can't find anything short of the
two host names resolving to the same IP.  I presume the conn data for tata
is showing the correct IP for that machine?