Hi
This is quite possibly to do with SNI, where the webserver is unable to match a certificate to the request. Try adding "sni" to the hosts.cfg entry, or add "--sni" to the xymonnet parameters in tasks.cfg.
Apparently this is happening all over the place in the past few days, triggered by a patch by the Apache foundation for a CVE related to improper SNI handling. Could be a coincidence, given that you didn't upgrade Apache. But the symptoms appear to be the same.
Cheers Jeremy
On Sat, 19 Jul 2025 at 15:47, <betsys@well.com> wrote:
We have an https test which started erroring when the target host auto-updated from ubuntu 8.6 to 8.7
Anyone seeing anything like this?
Apache version hasn’t changed , 2.4.58, although packages are re-installed with 8.7 versions
Searching for “Misdirected request” brings up issues with multi-name certs but target cert is just for the one hostname, no SAN no wildcard.
Tried the various things like httpsc, httpsm, httpsh, no joy.
If I limit to http the test is green . I can wget the https page from the xymon host
The SSL cert test has stayed green uninterrupted.
Ran the site past Qualys SSL test (external IP) and testssl (internal) with nothing much interesting.
Thanks for any clues.
--
Hosts.cfg line:
172.30.0.202 dokuwiki.example.com #https://dokuwiki.example.com
Yesterday:
Fri Jul 11 14:41:35 2025: OK
green https://dokuwiki.example.com/ - OK
HTTP/1.1 302 Found
Date: Fri, 11 Jul 2025 21:41:35 GMT
Server: Apache/2.4.58 (Ubuntu)
Vary: Cookie
Set-Cookie: DokuWiki=57e8op63npgj2ehl99rp99n1s1; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: DW7fa065a06cb74b536c124cfbe56ac6d3=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/; secure; HttpOnly; SameSite=Lax
Location: /doku.php?id=start
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8
Seconds: 0.017766000
--
--
Today (showing http and https):
Fri Jul 18 22:42:49 2025: Misdirected Request ; OK
red https://dokuwiki.example.com/ - Misdirected Request
HTTP/1.1 421 Misdirected Request
Date: Sat, 19 Jul 2025 05:42:49 GMT
Server: Apache/2.4.58 (Ubuntu)
Content-Length: 402
Connection: close
Content-Type: text/html; charset=iso-8859-1
Seconds: 0.031074000
green http://dokuwiki.example.com/ - OK
HTTP/1.1 302 Found
Date: Sat, 19 Jul 2025 05:42:49 GMT
Server: Apache/2.4.58 (Ubuntu)
Location: https://dokuwiki.example.com/
Content-Length: 285
Connection: close
Content-Type: text/html; charset=iso-8859-1
Seconds: 0.015943000
Xymon mailing list -- xymon@xymon.com To unsubscribe send an email to xymon-leave@xymon.com