Hi David,

This might not help at all, but when I had problems with xymon HTTPS and SSL checks on my Win2012 R2 ADFS server recently, it was actually the target website requiring Server Name Indication (SNI) support, rather than a TLS 1.1 / 1.2 issue. I was able to fix the problem by adding 'sni' on the end of the host entry in hosts.cfg.

Please disregard this advice if not relevant, but perhaps it will help others :)

Kind Regards,

Ian

On 7 June 2016 at 08:31, Gore, David W (David) via Xymon <xymon at xymon.com> wrote:

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---------- Forwarded message ---------- From: "Gore, David W (David)" <david.gore at verizon.com> To: "xymon at xymon.com" <xymon at xymon.com> Cc: Date: Mon, 6 Jun 2016 18:20:12 -0400 Subject: [Xymon] Support for TLS v1.1 and 1.2?

Mark Felder,

Mentioned last year around April 17th, 2015 where Xymon support for TLS v1.1 and v1.2 may be lacking. Perhaps the issue is more my naiveté but does anyone know how I can get the sslcert and http tests to work correctly with Apache and Xymon.

[image: red] https://xymon1.domain.com/ - SSL error

The sslcert test goes purple.

Os: Red Hat Enterprise Linux Server release 7.2 (Maipo)

Openssl: OpenSSL 1.0.1e-fips 11 Feb 2013

Xymon: 4.3.26

David W Gore