- edited description
SSL certificate pre-expiration test does not work if server is FreeSWITCH
Issue #680
resolved
Details from monit.log
[UTC Oct 24 08:14:54] info : Starting Monit 5.24.0 daemon with http interface at [0.0.0.0]:2812 [UTC Oct 24 08:14:54] info : 'fs-test.caw.me' Monit 5.24.0 started [UTC Oct 24 08:14:54] info : M/Monit heartbeat started [UTC Oct 24 08:14:54] error : 'freeswitch' failed protocol test [HTTP] at [fs-test.caw.me]:443 [TCP/IP TLS] -- HTTP error: Server returned status 400 [UTC Oct 24 08:14:54] error : 'freeswitch' certificate expiry in 0 days matches check limit [valid > 30 days]
443 port - is FreeSWITCH WebSocket port.
Monit config string: if failed host fs-test.caw.me port 443 protocol https and certificate valid > 30 days then alert
This command work fine: openssl s_client -connect fs-test.caw.me:443
https://fs-test.caw.me - this link opens without any problems in any modern browsers.
Comments (3)
-
reporter -
reporter - changed status to resolved
Without
protocol https
works fine. -
repo owner Fixed: Issue
#680: Port test: If the protocol check failed, the SSL certificate expiration test returned false positive error.→ <<cset 45ecbe396623>>
- Log in to comment