Re: Christian - ssl question

[Christian Hopp]

On Tue, 17 Jun 2003, Jan-Henrik Haukeland wrote:

>
> When debugging I noticed that requesting status information from the
> command line from the monit daemon always fails when the daemon is
> running with ssl. The reason is that SSL_get_peer_certificate fails
> because the monit server is not sending it's sertificat. This is a
> minor error since it's always possible to get the status from the
> web-interface via ssl, but it would have been nice to have 'monit
> status' work from the command line work even with ssl. I guess it's
> not trivial to add this to the monit http server (that is, sending
> it's certificate upon request) or what do you think?

I do not get the problem.  I connect to monit with ssl on CLI and it
works perfectly fine.  My settings...

set httpd port 2813
        ssl enable
        pemfile "/opt/etc/ssl/monit/monit.pem"
        allowselfcertification
        allow admin:password

of course our server uses monit 3.2.  But we haven't changed anything
special lately.

I just checked the new version... someone broke it. (-:  In 3.2 it was
working fine!

Merde... I try to find the bug....

CHopp


-- 
Christian Hopp                                email: address@hidden
Institut für Elektrische Informationstechnik             fon: +49-5323-72-2113
TU Clausthal, Leibnizstr. 28, 38678 Clausthal-Zellerf.   fax: +49-5323-72-3197
                             pgpkey: https://www.iei.tu-clausthal.de/pgp-keys/