How to tell if Xymon OpenSSL is enabled?
list Tom S
So at first I compiled Xymon with no SSL. Then I re compiled it over the existing xymon (I made sure it is shutdown first) with the following in the Makefile . the configure.server added the below flags: (Ubuntu 10.04) # OpenSSL settings SSLFLAGS = -DHAVE_OPENSSL=1 SSLINCDIR = -I/usr/bin SSLLIBS = -L/usr/include/openssl/ -lssl -lcrypto RPATHVAL += /usr/include/openssl/ How can I tell if it was successful? When I added the following to the hosts.cfg file; <ip> hostname # ssh https://mydomain.com ssh-tunnel I get the following in the xymon status page: = https://mydomain.com/ - Connected, but got empty response = this is in the 'http' category. should there be an 'https' category added? Is there a way I can surely tell that the Xymon compiled installation has full openssl support? TIA!
list Josh Luthman
I think you could check https://encrypted.google.com/ Josh Luthman Office: XXX-XXX-XXXX Direct: XXX-XXX-XXXX XXXX Wayne St Suite XXXX Troy, OH XXXXX
▸
On Wed, Oct 5, 2011 at 10:49 AM, Tom S <user-428671d28ab5@xymon.invalid> wrote:
So at first I compiled Xymon with no SSL. Then I re compiled it over the existing xymon (I made sure it is shutdown first) with the following in the Makefile . the configure.server added the below flags: (Ubuntu 10.04) # OpenSSL settings SSLFLAGS = -DHAVE_OPENSSL=1 SSLINCDIR = -I/usr/bin SSLLIBS = -L/usr/include/openssl/ -lssl -lcrypto RPATHVAL += /usr/include/openssl/ How can I tell if it was successful? When I added the following to the hosts.cfg file; <ip> hostname # ssh https://mydomain.com ssh-tunnel I get the following in the xymon status page: = https://mydomain.com/ - Connected, but got empty response = this is in the 'http' category. should there be an 'https' category added? Is there a way I can surely tell that the Xymon compiled installation has full openssl support? TIA!
list Paul Root
Run ~xymon/bin/xymonnet -version You should get the SSL library tag $ ./xymonnet --version xymonnet version 4.3.4 SSL library : OpenSSL 0.9.8e-rhel5 01 Jul 2008 Paul Root - Engineer III - Qwest is now CenturyLink
▸
From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Tom S Sent: Wednesday, October 05, 2011 9:50 AM To: xymon at xymon.com Subject: [Xymon] How to tell if Xymon OpenSSL is enabled? So at first I compiled Xymon with no SSL. Then I re compiled it over the existing xymon (I made sure it is shutdown first) with the following in the Makefile . the configure.server added the below flags: (Ubuntu 10.04) # OpenSSL settings SSLFLAGS = -DHAVE_OPENSSL=1 SSLINCDIR = -I/usr/bin SSLLIBS = -L/usr/include/openssl/ -lssl -lcrypto RPATHVAL += /usr/include/openssl/ How can I tell if it was successful? When I added the following to the hosts.cfg file; <ip> hostname # ssh https://mydomain.com ssh-tunnel I get the following in the xymon status page: = https://mydomain.com/ - Connected, but got empty response = this is in the 'http' category. should there be an 'https' category added? Is there a way I can surely tell that the Xymon compiled installation has full openssl support? TIA!
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful. If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.
list Paul Root
Oh, and it stays in the http test column, there is not a https test column.
▸
Paul Root - Engineer III - Qwest is now CenturyLink From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Tom S Sent: Wednesday, October 05, 2011 9:50 AM To: xymon at xymon.com Subject: [Xymon] How to tell if Xymon OpenSSL is enabled? So at first I compiled Xymon with no SSL. Then I re compiled it over the existing xymon (I made sure it is shutdown first) with the following in the Makefile . the configure.server added the below flags: (Ubuntu 10.04) # OpenSSL settings SSLFLAGS = -DHAVE_OPENSSL=1 SSLINCDIR = -I/usr/bin SSLLIBS = -L/usr/include/openssl/ -lssl -lcrypto RPATHVAL += /usr/include/openssl/ How can I tell if it was successful? When I added the following to the hosts.cfg file; <ip> hostname # ssh https://mydomain.com ssh-tunnel I get the following in the xymon status page: = https://mydomain.com/ - Connected, but got empty response = this is in the 'http' category. should there be an 'https' category added? Is there a way I can surely tell that the Xymon compiled installation has full openssl support? TIA! This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
list Tom S
still no luck. Does anyone have the proper attribues for on Ubuntu 10.04 x86_64 SSLINCDIR = -I/usr/bin SSLLIBS = -L/usr/include/openssl/ -lssl -lcrypto RPATHVAL += /usr/include/openssl/ The above doesn't seem to do the trick. I even tried ./configure.server --sslinclude /usr/include/openssl --ssllib /usr/lib/ both times configured , make and make install on a new xymon folder, nothing. GCC just shows: SSLFLAGS="-DHAVE_OPENSSL=1" SSLINCDIR="-I/usr/include/openssl " SSLLIBS="-L/usr/lib/ -lssl -lcrypto" LDAPFLAGS="" LDAPINCDIR="" LDAPLIBS="" DOSNMP="no" NETLIBS="" XYMONHOME="/home/xymon/server" ARESVER="1.7.3" RUNTIMEDEFS="" PCREINCDIR="-I/usr/include" PCRELIBS="-L/usr/lib64 -lpcre" LIBRTDEF="-lrt" make -C xymonnet all make[1]: Entering directory `/home/xymon-4.3.5/xymonnet' make[1]: Nothing to be done for `all'. as if everything is fine. still no SSL support. tia On Wed, Oct 5, 2011 at 2:02 PM, Root, Paul <user-76fdb6883669@xymon.invalid>wrote:
Remove xymonnet and do a make again. **** ** ** See what the output looks like.**** Are these config lines in the gcc lines?**** ** ** You might try re-doing ./configure**** ** ** I compiled on CentOS, and had the similar problem of not having the development (include files) package installed the first time. Looks like you have that though.**** ** ** ** ** Paul Root - Engineer III - Qwest is now CenturyLink**** ** ** *From:* Tom S [mailto:user-428671d28ab5@xymon.invalid] *Sent:* Wednesday, October 05, 2011 12:50 PM *To:* Root, Paul *Subject:* Re: [Xymon] How to tell if Xymon OpenSSL is enabled?**** ** ** Thanks, I thought I complied it with SSL but it only shows the following: /home/xymon/server/bin# ./xymonnet --version xymonnet version 4.3.5 My Makefile (Ubuntu 10.04) has the following:
▸
# OpenSSL settings
SSLFLAGS = -DHAVE_OPENSSL=1
SSLINCDIR = -I/usr/bin
SSLLIBS = -L/usr/include/openssl/ -lssl -lcrypto
RPATHVAL += /usr/include/openssl/
#
I did a make and make install and it gave me no errors.
I installed the following packages for Openssl :
libssl-dev
libssl0.9.8
openssl
Any ideas?
****
On Wed, Oct 5, 2011 at 10:58 AM, Root, Paul <user-76fdb6883669@xymon.invalid>
wrote:****
▸
Oh, and it stays in the http test column, there is not a https test column. **** **** Paul Root - Engineer III - Qwest is now CenturyLink**** **** *From:* xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] *On Behalf Of *Tom S *Sent:* Wednesday, October 05, 2011 9:50 AM *To:* xymon at xymon.com *Subject:* [Xymon] How to tell if Xymon OpenSSL is enabled?**** **** So at first I compiled Xymon with no SSL.**** Then I re compiled it over the existing xymon (I made sure it is shutdown first) with the following in the Makefile . the configure.server added the below flags: (Ubuntu 10.04) # OpenSSL settings SSLFLAGS = -DHAVE_OPENSSL=1 SSLINCDIR = -I/usr/bin SSLLIBS = -L/usr/include/openssl/ -lssl -lcrypto RPATHVAL += /usr/include/openssl/ How can I tell if it was successful? When I added the following to the hosts.cfg file; <ip> hostname # ssh https://mydomain.com ssh-tunnel I get the following in the xymon status page: = https://mydomain.com/ - Connected, but got empty response = this is in the 'http' category. should there be an 'https' category added? Is there a way I can surely tell that the Xymon compiled installation has full openssl support? TIA!**** ** ** This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.**** ** ** This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
list Henrik Størner
▸
On 05-10-2011 22:55, Tom S wrote:
still no luck. Does anyone have the proper attribues for on Ubuntu 10.04 x86_64
That's exactly the platform that most Xymon development happens on. So for a very quick fix, you could use the deb-files you can download from Sourceforge - they do have SSL support built in.
For compiling, make sure you have these packages installed:
henrik at osiris:~$ dpkg -l|grep ssl
ii libssl-dev 0.9.8k-7ubuntu8.6
ii libssl0.9.8 0.9.8k-7ubuntu8.6
ii openssl 0.9.8k-7ubuntu8.6
And when changing settings in the Makefile, run "make clean" first to make sure everything is re-compiled. As a final check, you can run
ldd /usr/lib/xymon/server/bin/xymonnet
and see if lists libssl.so.0.9.8 and libcrypto.so.0.9.8.
Regards,
Henrik