-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

"It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSI1QACgkQmb+gadEcsb4gWACgrPC8ibOGARb2Qr3w6crmGTf1 c3AAn0xfNxEltxhrW9+oeTjysMR26z7e =s71t -----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

Yeah, take a quick through the logs on your machine that runs the network tests. It's likely that you'll find something in one of them (I'd think the network log, but I've been suprised before).

On 12/19/2012 03:30 PM, Jewel Makda wrote:

Sorry. What I mean is the status turns "red" and says "Server timeout." I am not sure is there are any logs which will help me determine what I am missing.

Jewel

On 12/19/2012 2:28 PM, Novosielski, Ryan wrote: "It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

...

...

...

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

...

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSJG8ACgkQmb+gadEcsb5PRgCaAiK34l6Eq7YdlRNaduloJUMc gsUAnifm9cnXsINHAtKYsC47JtaasO+N =aGMY -----END PGP SIGNATURE-----

I know I don't have any issues with blocked ports or anything. I think the SSL Libraries are still not configured. When I run (xymonnet --version) it still only shows my xymon version and no SSL libraries. I installed openssl and libssl-dev

I am not sure what path to include when I run the ./configure.server command.

When do I run the make clean?

Jewel

On 12/19/2012 2:58 PM, Tim McCloskey wrote:

The first thing that came to mind when I saw your re-compile message is that you did not run 'make clean' prior to adding those new options.

That said, it sounds like you did get ssl working... If ssl is working now (xymonnet --version shows the ssl libraries, etc) then I would have a look at any network or server firewalls/acls that prevent your xymon server from --> yourclient:tcp 443.

If you don't know about any rules you can try to telnet to port 443 on the client from your xymon server. There are also some certificate options that you may need to sort out once you can speak to the remote on 443.

Tim

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 12:30 PM To: Novosielski, Ryan Cc: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

Sorry. What I mean is the status turns "red" and says "Server timeout." I am not sure is there are any logs which will help me determine what I am missing.

Jewel

On 12/19/2012 2:28 PM, Novosielski, Ryan wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

"It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

...

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSI1QACgkQmb+gadEcsb4gWACgrPC8ibOGARb2Qr3w6crmGTf1 c3AAn0xfNxEltxhrW9+oeTjysMR26z7e =s71t -----END PGP SIGNATURE-----

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

I believe that you'll want to run "make clean" before rerunning "configure --server".

-- Mike Burger AIX Administrator

Phone (317) 537-3680, Fax (317) 537-4680, Cell (317) 797-2040 E-mail:  Mike.Burger at FreedomMortgage.com "Once word leaks out that a pirate's gone soft, people begin to disobey you and then it's nothing but work, work, work, all the time." --Westley/The Dread Pirate Roberts

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 4:09 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

I know I don't have any issues with blocked ports or anything. I think the SSL Libraries are still not configured. When I run (xymonnet --version) it still only shows my xymon version and no SSL libraries. I installed openssl and libssl-dev

I am not sure what path to include when I run the ./configure.server command.

When do I run the make clean?

Jewel

On 12/19/2012 2:58 PM, Tim McCloskey wrote:

The first thing that came to mind when I saw your re-compile message is that you did not run 'make clean' prior to adding those new options.

That said, it sounds like you did get ssl working... If ssl is working now (xymonnet --version shows the ssl libraries, etc) then I would have a look at any network or server firewalls/acls that prevent your xymon server from --> yourclient:tcp 443.

If you don't know about any rules you can try to telnet to port 443 on the client from your xymon server. There are also some certificate options that you may need to sort out once you can speak to the remote on 443.

Tim

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 12:30 PM To: Novosielski, Ryan Cc: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

Sorry. What I mean is the status turns "red" and says "Server timeout." I am not sure is there are any logs which will help me determine what I am missing.

Jewel

On 12/19/2012 2:28 PM, Novosielski, Ryan wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

"It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

...

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems |Programmer $&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - |973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSI1QACgkQmb+gadEcsb4gWACgrPC8ibOGARb2Qr3w6crmGTf1 c3AAn0xfNxEltxhrW9+oeTjysMR26z7e =s71t -----END PGP SIGNATURE-----

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure, alteration or distribution is strictly prohibited and may violate state or federal law. If you are not the intended recipient, please contact the sender by reply e-mail, delete this email and destroy all copies of the message.

Really? Interesting.

I guess the cleanest way to go, then, would be to delete the directory, untar again, and then rebuild.

But, if your xymonnet command is revealing that ssl is enabled, then it may be the URL you've listed for testing.

-- Mike Burger AIX Administrator

Phone (317) 537-3680, Fax (317) 537-4680, Cell (317) 797-2040 E-mail:  Mike.Burger at FreedomMortgage.com "Once word leaks out that a pirate's gone soft, people begin to disobey you and then it's nothing but work, work, work, all the time." --Westley/The Dread Pirate Roberts

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 4:16 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

When I run (sudo make clean) I get the following response: "make: *** No rule to make target 'clean'. Stop"

Jewel

On 12/19/2012 3:12 PM, Michael Burger wrote:

I believe that you'll want to run "make clean" before rerunning "configure --server".

-- Mike Burger AIX Administrator

Phone (317) 537-3680, Fax (317) 537-4680, Cell (317) 797-2040 E-mail: Mike.Burger at FreedomMortgage.com "Once word leaks out that a pirate's gone soft, people begin to disobey you and then it's nothing but work, work, work, all the time." --Westley/The Dread Pirate Roberts

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 4:09 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

I know I don't have any issues with blocked ports or anything. I think the SSL Libraries are still not configured. When I run (xymonnet --version) it still only shows my xymon version and no SSL libraries. I installed openssl and libssl-dev

I am not sure what path to include when I run the ./configure.server command.

When do I run the make clean?

Jewel

On 12/19/2012 2:58 PM, Tim McCloskey wrote:

...

The first thing that came to mind when I saw your re-compile message is that you did not run 'make clean' prior to adding those new options.

That said, it sounds like you did get ssl working... If ssl is working now (xymonnet --version shows the ssl libraries, etc) then I would have a look at any network or server firewalls/acls that prevent your xymon server from --> yourclient:tcp 443.

If you don't know about any rules you can try to telnet to port 443 on the client from your xymon server. There are also some certificate options that you may need to sort out once you can speak to the remote on 443.

Tim

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 12:30 PM To: Novosielski, Ryan Cc: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

Sorry. What I mean is the status turns "red" and says "Server timeout." I am not sure is there are any logs which will help me determine what I am missing.

Jewel

On 12/19/2012 2:28 PM, Novosielski, Ryan wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

"It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

...

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems |Programmer $&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - |973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSI1QACgkQmb+gadEcsb4gWACgrPC8ibOGARb2Qr3w6crmGTf1 c3AAn0xfNxEltxhrW9+oeTjysMR26z7e =s71t -----END PGP SIGNATURE-----

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure, alteration or distribution is strictly prohibited and may violate state or federal law. If you are not the intended recipient, please contact the sender by reply e-mail, delete this email and destroy all copies of the message.

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure, alteration or distribution is strictly prohibited and may violate state or federal law. If you are not the intended recipient, please contact the sender by reply e-mail, delete this email and destroy all copies of the message.

1. To verify all of the SSL bits are there; You should be able to do the following on Ubuntu and report the output back to the list.

dpkg -l | egrep -i '(ssl|pcre)'

Another method from the Ubuntu faq: apt-cache search libssl | grep SSL

And yes, I snuck pcre in the search.

2. You probably don't have a Makefile, so 'make clean' in this case is going to fail, but you still have stuff in the build subdir that might create fun times. So, move/rename your source tree and extract again like already mentioned. Then run ./configure.server make && make install. But don't waste your time if the output from the package list above does not include the proper SSL packages.

Good Luck!

From: Tim McCloskey Sent: Wednesday, December 19, 2012 1:16 PM To: xymon at xymon.com Subject: RE: [Xymon] Monitoring HTTPS sites

You should not need to specify any path names if the libraries are installed in normal locations. Having not used Ubuntu I can't offer much help in that regard. Same goes for if the libssl-devel package is the same as openssl-devel in other distributions.

From your source directory:

make clean ./configure.server Look at output from configure.

make Look at output from make.

make install Look at make install output.

Take careful note of the output from the build, maybe dump it into a text file.

Tim

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:09 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

I know I don't have any issues with blocked ports or anything. I think the SSL Libraries are still not configured. When I run (xymonnet --version) it still only shows my xymon version and no SSL libraries. I installed openssl and libssl-dev

I am not sure what path to include when I run the ./configure.server command.

When do I run the make clean?

Jewel

On 12/19/2012 2:58 PM, Tim McCloskey wrote:

The first thing that came to mind when I saw your re-compile message is that you did not run 'make clean' prior to adding those new options.

That said, it sounds like you did get ssl working... If ssl is working now (xymonnet --version shows the ssl libraries, etc) then I would have a look at any network or server firewalls/acls that prevent your xymon server from --> yourclient:tcp 443.

If you don't know about any rules you can try to telnet to port 443 on the client from your xymon server. There are also some certificate options that you may need to sort out once you can speak to the remote on 443.

Tim

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 12:30 PM To: Novosielski, Ryan Cc: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

Sorry. What I mean is the status turns "red" and says "Server timeout." I am not sure is there are any logs which will help me determine what I am missing.

Jewel

On 12/19/2012 2:28 PM, Novosielski, Ryan wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

"It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

...

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSI1QACgkQmb+gadEcsb4gWACgrPC8ibOGARb2Qr3w6crmGTf1 c3AAn0xfNxEltxhrW9+oeTjysMR26z7e =s71t -----END PGP SIGNATURE-----

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Here is the output from the two command you suggested:

Jewel

On 12/19/2012 3:46 PM, Tim McCloskey wrote:

This was supposed to be attached in the last spew. Likely explanation of why make clean failed

./configure.server

Configuration script for Xymon Already configured - remove Makefile to re-configure

rm Makefile

rm: remove regular file `Makefile'? y

make clean

make: *** No rule to make target `clean'. Stop.

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Tim McCloskey [tm at freedom.com] Sent: Wednesday, December 19, 2012 1:41 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

1. To verify all of the SSL bits are there; You should be able to do the following on Ubuntu and report the output back to the list.

dpkg -l | egrep -i '(ssl|pcre)'

Another method from the Ubuntu faq: apt-cache search libssl | grep SSL

And yes, I snuck pcre in the search.

2. You probably don't have a Makefile, so 'make clean' in this case is going to fail, but you still have stuff in the build subdir that might create fun times. So, move/rename your source tree and extract again like already mentioned. Then run ./configure.server make && make install. But don't waste your time if the output from the package list above does not include the proper SSL packages.

Good Luck!

---

From: Tim McCloskey Sent: Wednesday, December 19, 2012 1:16 PM To: xymon at xymon.com Subject: RE: [Xymon] Monitoring HTTPS sites

You should not need to specify any path names if the libraries are installed in normal locations. Having not used Ubuntu I can't offer much help in that regard. Same goes for if the libssl-devel package is the same as openssl-devel in other distributions.

From your source directory:

make clean ./configure.server Look at output from configure.

make Look at output from make.

make install Look at make install output.

Take careful note of the output from the build, maybe dump it into a text file.

Tim

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:09 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

I know I don't have any issues with blocked ports or anything. I think the SSL Libraries are still not configured. When I run (xymonnet --version) it still only shows my xymon version and no SSL libraries. I installed openssl and libssl-dev

I am not sure what path to include when I run the ./configure.server command.

When do I run the make clean?

Jewel

On 12/19/2012 2:58 PM, Tim McCloskey wrote:

...

The first thing that came to mind when I saw your re-compile message is that you did not run 'make clean' prior to adding those new options.

That said, it sounds like you did get ssl working... If ssl is working now (xymonnet --version shows the ssl libraries, etc) then I would have a look at any network or server firewalls/acls that prevent your xymon server from --> yourclient:tcp 443.

If you don't know about any rules you can try to telnet to port 443 on the client from your xymon server. There are also some certificate options that you may need to sort out once you can speak to the remote on 443.

Tim

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 12:30 PM To: Novosielski, Ryan Cc: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

Sorry. What I mean is the status turns "red" and says "Server timeout." I am not sure is there are any logs which will help me determine what I am missing.

Jewel

On 12/19/2012 2:28 PM, Novosielski, Ryan wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

"It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

...

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSI1QACgkQmb+gadEcsb4gWACgrPC8ibOGARb2Qr3w6crmGTf1 c3AAn0xfNxEltxhrW9+oeTjysMR26z7e =s71t -----END PGP SIGNATURE-----

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Good, you've got the required SSL stuff. You should be able to perform a clean build of Xymon now. Give it a go and let us know how it goes :)

From: Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 2:37 PM To: Tim McCloskey Cc: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl0.9.8 - SSL shared libraries

Can you actually 'su - ' to root on this box? I suspect that your environment does not have proper path and lib path statements. If you can't su to root then most likely you WILL need to provide the path to the SSL goodies. You will need to see where the libraries and include files are installed. Usually /usr/local/ssl, might be /usr/local/openssl on your system. Use whatever tools you have to find the install location for these packages and add the flags as needed.

apt-file list libssl-dev apt-file list libssl0.9.8

--sslinclude DIRECTORY : Specify location of OpenSSL include files --ssllib DIRECTORY : Specify location of OpenSSL libraries

./build/ssl.sh shows the search patterns.

Good Luck,

Tim

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 2:45 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

When I run (sudo ./configure.server --pcreinclude /usr/include --pcrelib /usr/lib) I get the following: "OpenSSL include or library-files not found.

Jewel On 12/19/2012 4:40 PM, Tim McCloskey wrote:

Good, you've got the required SSL stuff. You should be able to perform a clean build of Xymon now.

Give it a go and let us know how it goes :)

From: Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu]

Sent: Wednesday, December 19, 2012 2:37 PM

To: Tim McCloskey

Cc: xymon at xymon.com

Subject: Re: [Xymon] Monitoring HTTPS sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL

libssl-dev - SSL development libraries, header files and documentation

libssl-doc - SSL development documentation documentation

libssl1.0.0 - SSL shared libraries

libssl0.9.8 - SSL shared libraries

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

I am not able to determine where the SSL headers are on my system. The apt-file command doesn't work saying I need to install it yet when I try it says the package doesn't exist. I have tried to run the ./configure command using the following paths to point to where I think the ssl headers are but I always get an error when I run make and make install.

Paths I have used in my ./configure command: /etc/ssl /usr/include/openssl /usr/lib/ssl/misc /usr/local /usr/src /usr/lib

The errors I am getting are: undefined reference to 'SSLv2_client_method' make[1]: *** [xymonnet] Error 1 make: *** [xymonnet-build] Error 2

I have to run the ./configure command with paths to the pcreinclude and pcrelib or else it won't find them - same for the OpenSSL.

I am worried I might mess up my current setup since Xymon is working well running on SSL. It just not able to monitor other https sites.

Jewel

On 12/19/2012 4:58 PM, Tim McCloskey wrote:

Can you actually 'su - ' to root on this box? I suspect that your environment does not have proper path and lib path statements. If you can't su to root then most likely you WILL need to provide the path to the SSL goodies. You will need to see where the libraries and include files are installed. Usually /usr/local/ssl, might be /usr/local/openssl on your system. Use whatever tools you have to find the install location for these packages and add the flags as needed.

apt-file list libssl-dev apt-file list libssl0.9.8

--sslinclude DIRECTORY : Specify location of OpenSSL include files --ssllib DIRECTORY : Specify location of OpenSSL libraries

./build/ssl.sh shows the search patterns.

Good Luck,

Tim

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 2:45 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

When I run (sudo ./configure.server --pcreinclude /usr/include --pcrelib /usr/lib) I get the following: "OpenSSL include or library-files not found.

Jewel On 12/19/2012 4:40 PM, Tim McCloskey wrote:

Good, you've got the required SSL stuff. You should be able to perform a clean build of Xymon now.

Give it a go and let us know how it goes :)

From: Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu]

Sent: Wednesday, December 19, 2012 2:37 PM

To: Tim McCloskey

Cc: xymon at xymon.com

Subject: Re: [Xymon] Monitoring HTTPS sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL

libssl-dev - SSL development libraries, header files and documentation

libssl-doc - SSL development documentation documentation

libssl1.0.0 - SSL shared libraries

libssl0.9.8 - SSL shared libraries

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

The output I get doesn't help me. It says:

The aptitude command isn't recognized on my system. When I try to install the packages (source foo) and (build-dep xymon) or (build-dep foo) it says they cannot be found.

I may have to abandon this project. Every solution that keeps getting thrown my way is adding more complexity and it appears I am not getting ahead. I appreciate everyone's efforts in trying to help me.

Jewel

On 12/20/2012 9:28 AM, Novosielski, Ryan wrote:

Doing a dpkg -L on the SSL packages one by one should tell you where those files. dpkg -l libssl (I think that was the name of one) | grep "\.h" should get you somewhere.

In place of the apt-cache command, you might try aptitude. Which is the primary command for package management is a bit in flux at the moment on Ubuntu.

----- Original Message ----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Thursday, December 20, 2012 10:23 AM To: xymon at xymon.com <xymon at xymon.com> Subject: Re: [Xymon] Monitoring HTTPS sites

I am not able to determine where the SSL headers are on my system. The apt-file command doesn't work saying I need to install it yet when I try it says the package doesn't exist. I have tried to run the ./configure command using the following paths to point to where I think the ssl headers are but I always get an error when I run make and make install.

Paths I have used in my ./configure command: /etc/ssl /usr/include/openssl /usr/lib/ssl/misc /usr/local /usr/src /usr/lib

The errors I am getting are: undefined reference to 'SSLv2_client_method' make[1]: *** [xymonnet] Error 1 make: *** [xymonnet-build] Error 2

I have to run the ./configure command with paths to the pcreinclude and pcrelib or else it won't find them - same for the OpenSSL.

I am worried I might mess up my current setup since Xymon is working well running on SSL. It just not able to monitor other https sites.

Jewel

On 12/19/2012 4:58 PM, Tim McCloskey wrote:

...

Can you actually 'su - ' to root on this box? I suspect that your environment does not have proper path and lib path statements. If you can't su to root then most likely you WILL need to provide the path to the SSL goodies. You will need to see where the libraries and include files are installed. Usually /usr/local/ssl, might be /usr/local/openssl on your system. Use whatever tools you have to find the install location for these packages and add the flags as needed.

apt-file list libssl-dev apt-file list libssl0.9.8

--sslinclude DIRECTORY : Specify location of OpenSSL include files --ssllib DIRECTORY : Specify location of OpenSSL libraries

./build/ssl.sh shows the search patterns.

Good Luck,

Tim

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 2:45 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

When I run (sudo ./configure.server --pcreinclude /usr/include --pcrelib /usr/lib) I get the following: "OpenSSL include or library-files not found.

Jewel On 12/19/2012 4:40 PM, Tim McCloskey wrote:

Good, you've got the required SSL stuff. You should be able to perform a clean build of Xymon now.

Give it a go and let us know how it goes :)

From: Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu]

Sent: Wednesday, December 19, 2012 2:37 PM

To: Tim McCloskey

Cc: xymon at xymon.com

Subject: Re: [Xymon] Monitoring HTTPS sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL

libssl-dev - SSL development libraries, header files and documentation

libssl-doc - SSL development documentation documentation

libssl1.0.0 - SSL shared libraries

libssl0.9.8 - SSL shared libraries

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

It's been a little while since I built this thing, and I remember having similar annoying problems, but I believe there's a log somewhere in there that you can look at to see what failed, specifically. Sometimes it's missing a header file for some reason which is really there.

You can look at build/ssl.sh to see what it is doing when it fails. Run it first so you can know what output to look for in the file.

On 12/19/2012 05:45 PM, Jewel Makda wrote:

When I run (sudo ./configure.server --pcreinclude /usr/include --pcrelib /usr/lib) I get the following: "OpenSSL include or library-files not found.

Jewel

On 12/19/2012 4:40 PM, Tim McCloskey wrote:

...

Good, you've got the required SSL stuff. You should be able to perform a clean build of Xymon now. Give it a go and let us know how it goes :)

---

*From:* Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu]

...

*Sent:* Wednesday, December 19, 2012 2:37 PM *To:* Tim McCloskey *Cc:* xymon at xymon.com *Subject:* Re: [Xymon] Monitoring HTTPS sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl0.9.8 - SSL shared libraries

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSSSkACgkQmb+gadEcsb6XpQCgwwkbqNTERmwkMX/QIucd877y O98AoM2zn3ErMpG4bkUrDfciI45aEr/4 =Dm6h -----END PGP SIGNATURE-----

Did you do what it told you to do? Include -sslinclude and -ssllib in the configure command?

From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Thursday, December 20, 2012 9:26 AM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

When I run build/ssl.h is says: [cid:image001.png at 01CDDE94.4F661A70]

Jewel On 12/19/2012 5:09 PM, Novosielski, Ryan wrote:

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

It's been a little while since I built this thing, and I remember

having similar annoying problems, but I believe there's a log

somewhere in there that you can look at to see what failed,

specifically. Sometimes it's missing a header file for some reason

which is really there.

You can look at build/ssl.sh to see what it is doing when it fails.

Run it first so you can know what output to look for in the file.

On 12/19/2012 05:45 PM, Jewel Makda wrote:

When I run (sudo ./configure.server --pcreinclude /usr/include

--pcrelib /usr/lib) I get the following: "OpenSSL include or

library-files not found.

Jewel

On 12/19/2012 4:40 PM, Tim McCloskey wrote:

Good, you've got the required SSL stuff. You should be able to

perform a clean build of Xymon now. Give it a go and let us know

how it goes :)

*From:* Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu<mailto:jewel.brueggeman-makda at washburn.edu>]

*Sent:* Wednesday, December 19, 2012 2:37 PM *To:* Tim McCloskey

*Cc:* xymon at xymon.com<mailto:xymon at xymon.com> *Subject:* Re: [Xymon] Monitoring HTTPS

sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL libssl-dev -

SSL development libraries, header files and documentation

libssl-doc - SSL development documentation documentation

libssl1.0.0 - SSL shared libraries libssl0.9.8 - SSL shared

libraries

_______________________________________________ Xymon mailing

list Xymon at xymon.com<mailto:Xymon at xymon.com>

http://lists.xymon.com/mailman/listinfo/xymon

Right and so you can then see in that script what it does to determine that "build or include files not found". It probably runs a line that compiles and calls in those things. Running that line on the command line should give you more error output.

This /is/ a weak point in Xymon at the moment. It seems to be trickier to define the includes for some reason than with other packages. It think part of the reason is a lack of the traditional configure/config.log etc. stuff you'd normally use to troubleshoot.

From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Thursday, December 20, 2012 10:26 AM To: xymon at xymon.com <xymon at xymon.com> Subject: Re: [Xymon] Monitoring HTTPS sites

When I run build/ssl.h is says: [cid:part1.03040105.08030301 at washburn.edu]

Jewel

On 12/19/2012 5:09 PM, Novosielski, Ryan wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

It's been a little while since I built this thing, and I remember having similar annoying problems, but I believe there's a log somewhere in there that you can look at to see what failed, specifically. Sometimes it's missing a header file for some reason which is really there.

You can look at build/ssl.sh to see what it is doing when it fails. Run it first so you can know what output to look for in the file.

On 12/19/2012 05:45 PM, Jewel Makda wrote:

When I run (sudo ./configure.server --pcreinclude /usr/include --pcrelib /usr/lib) I get the following: "OpenSSL include or library-files not found.

Jewel

On 12/19/2012 4:40 PM, Tim McCloskey wrote:

Good, you've got the required SSL stuff. You should be able to perform a clean build of Xymon now. Give it a go and let us know how it goes :)

*From:* Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu<mailto:jewel.brueggeman-makda at washburn.edu>]

*Sent:* Wednesday, December 19, 2012 2:37 PM *To:* Tim McCloskey *Cc:* xymon at xymon.com<mailto:xymon at xymon.com> *Subject:* Re: [Xymon] Monitoring HTTPS sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl0.9.8 - SSL shared libraries

_______________________________________________ Xymon mailing list Xymon at xymon.com<mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon

You can also paste the screen shot and paste it on imgur.com and then share the URL, which would make everyone happier.

Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

On Thu, Dec 20, 2012 at 11:45 AM, Henrik Størner <henrik at hswn.dk> wrote:

BOFH

Certainly, if applicable. I'm sure there are some things easier explained with images, though.

Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

On Thu, Dec 20, 2012 at 12:04 PM, Novosielski, Ryan <novosirj at umdnj.edu>wrote:

Personally, and I bet many agree, I'd rather work with text. This also means that someone can search the list for the error and find it. Screenshots of text have no place in this world, and I've been trying to teach people that at every opportunity. :)

That's true, if the directory or old Makefile were not created as root :)

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Michael Burger [Mike.Burger at FreedomMortgage.com]

Sent: Wednesday, December 19, 2012 3:27 PM

To: Jewel Makda

Cc: xymon at xymon.com

Subject: Re: [Xymon] Monitoring HTTPS sites

There's really no need to run configure or the initial make via sudo. Only the "make install" would need that.

Just run ./configure.server && make as yourself.

Sent from my iPhone...please excuse any typos or short answers.

It's always suicide-mission this save-the-planet that. No one ever stops by just to say hi anymore. -Col. Jack O'Neill

On Dec 19, 2012, at 5:45 PM, "Jewel Makda" <jewel.brueggeman-makda at washburn.edu> wrote:

When I run (sudo ./configure.server --pcreinclude /usr/include --pcrelib /usr/lib) I get the following: "OpenSSL include or library-files not found.

Jewel On 12/19/2012 4:40 PM, Tim McCloskey wrote:

Good, you've got the required SSL stuff. You should be able to perform a clean build of Xymon now.

Give it a go and let us know how it goes :)

From: Jewel Brueggeman-Makda [jewel.brueggeman-makda at washburn.edu]

Sent: Wednesday, December 19, 2012 2:37 PM

To: Tim McCloskey

Cc: xymon at xymon.com

Subject: Re: [Xymon] Monitoring HTTPS sites

xymon at Xymon:~$ apt-cache search libssl | grep SSL

libssl-dev - SSL development libraries, header files and documentation

libssl-doc - SSL development documentation documentation

libssl1.0.0 - SSL shared libraries

libssl0.9.8 - SSL shared libraries

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Xymon mailing list

Xymon at xymon.com

http://lists.xymon.com/mailman/listinfo/xymon

CONFIDENTIALITY NOTICE: This e-mail message, including all attachments, is for the sole use of the intended recipient(s) and may contain confidential information. Any unauthorized review, use, disclosure, alteration or distribution is strictly prohibited and may violate state or federal law. If you are not the intended recipient, please contact the sender by reply e-mail, delete this email and destroy all copies of the message.

Run make clean before the configuration.

And pay attention to to output of the make.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 3:09 PM To: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

I know I don't have any issues with blocked ports or anything. I think the SSL Libraries are still not configured. When I run (xymonnet --version) it still only shows my xymon version and no SSL libraries. I installed openssl and libssl-dev

I am not sure what path to include when I run the ./configure.server command.

When do I run the make clean?

Jewel

On 12/19/2012 2:58 PM, Tim McCloskey wrote:

The first thing that came to mind when I saw your re-compile message is that you did not run 'make clean' prior to adding those new options.

That said, it sounds like you did get ssl working... If ssl is working now (xymonnet --version shows the ssl libraries, etc) then I would have a look at any network or server firewalls/acls that prevent your xymon server from --> yourclient:tcp 443.

If you don't know about any rules you can try to telnet to port 443 on the client from your xymon server. There are also some certificate options that you may need to sort out once you can speak to the remote on 443.

Tim

---

From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Jewel Makda [jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 12:30 PM To: Novosielski, Ryan Cc: xymon at xymon.com Subject: Re: [Xymon] Monitoring HTTPS sites

Sorry. What I mean is the status turns "red" and says "Server timeout." I am not sure is there are any logs which will help me determine what I am missing.

Jewel

On 12/19/2012 2:28 PM, Novosielski, Ryan wrote:

...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

"It fails" is not particularly specific.

On 12/19/2012 03:14 PM, Jewel Makda wrote:

...

I am runnng Ubuntu 11.04. I ran: sudo apt-get install libssl-dev I also reran configure using the following command: sudo ./configure.server --pcreinclude /usr/inlcude --pcrelib /usr/lib --sslinclude /usr/include --ssllib /usr/include

It found the SSL libraries and asked if I want to enable SSL and I said yes. I then ran Make and Make Install successfully. I then restarted Apache and Xymon but it still fails when I ask it to monitor a website using https.

Jewel

On 12/19/2012 1:33 PM, Tim McCloskey wrote:

...

Jewel,

What version of linux are you running? The openssl-devel package mentioned by Paul contains the files that are often missing when people run into this sort of issue. The same thing happens when people don't install the various 'devel' packages.

Regards, Tim ________________________________________ From: xymon-bounces at xymon.com [xymon-bounces at xymon.com] on behalf of Root, Paul [Paul.Root at CenturyLink.com] Sent: Wednesday, December 19, 2012 11:24 AM To: 'Jewel Makda' Cc: 'xymon at xymon.com' Subject: Re: [Xymon] Monitoring HTTPS sites

Never leave the mailing list. Always reply all.

Yes, that is different. We're talking Linux here. You don't specify, so we on the list are forced to guess.

The openssl Linux package is just the executable. You need header files, etc. to be able to compile things to use it.

-----Original Message----- From: Jewel Makda [mailto:jewel.brueggeman-makda at washburn.edu] Sent: Wednesday, December 19, 2012 1:12 PM To: Root, Paul Subject: Re: [Xymon] Monitoring HTTPS sites

I do have OpenSSL version 1.0.1 installed. Is this different?

Jewel

On 12/19/2012 11:59 AM, Root, Paul wrote:

...

You need openssl-devel installed. You may need to recompile or reinstall Xymon after you add it.

-----Original Message----- From: xymon-bounces at xymon.com [mailto:xymon-bounces at xymon.com] On Behalf Of Jewel Makda Sent: Wednesday, December 19, 2012 11:24 AM To: xymon at xymon.com Subject: [Xymon] Monitoring HTTPS sites

I am running version 4.3.5 When I run xymonnet --version I don't get any SSL libraries - just my version. I would like to be able to monitor some https sites but when I add the urls to the hosts.cfg file it fails. I am running the web console for my Xymon server over https. I am a newbie to linux so responses could be dummied down it would be greatly appreciated.

Thanks in advance, -- Jewel _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

• ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems |Programmer $&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - |973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/EI-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDSI1QACgkQmb+gadEcsb4gWACgrPC8ibOGARb2Qr3w6crmGTf1 c3AAn0xfNxEltxhrW9+oeTjysMR26z7e =s71t -----END PGP SIGNATURE-----

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon