Laurent,
Thank you for your answer. May you share this perl script ? should be useful for many ppl I guess
Le 25/11/2019 ? 14:03, Laurent Frigault a ?crit?:
On Fri, Nov 22, 2019 at 10:53:51AM +0100, Damien Martins wrote: Hi,
Since I upgraded a system to Debian 10 running Xymon client 4.3.28, my Xymon server (running version 4.3.28 on Debian 10) reports errors for IMAPS & POP3S tests.
This is weird, because I have another server, running Xymon 4.3.28 too, that is not reporting any issue.
My IMAPS & POPS3S daemon is dovecot 2.3.4.1-5+deb10u1
It is quiet complicated to find the logs for this test, so I don't know what is going wrong.
Sometimes, the test goes green for few minutes.
I'm not a debian specialist, but check the TLS protocol offerer by dovecot on this server. I had the same issue on freebsd when monitoring a dovecot offering TLS 1.3 even if xymon was build on a server running the same openssl version offering TLS 1.3.
I replaced the imaps/pop3s test by a perl scripts extension using IO::Socket::SSL build with the same openssl and it fixed the issue.
I reported this issue on this list but never got any answer.
https://lists.xymon.com/pipermail/xymon/2019-July/046585.html
Regards,
On Mon, Nov 25, 2019 at 02:09:55PM +0100, Damien Martins wrote:
Thank you for your answer. May you share this perl script ? should be useful for many ppl I guess
please find:
tls.pl the extension to install as tls in server/ext directory tls.task to install in server/etc/tasks.d/
tls.pl use 2 small modules (hasred by other xymon extension)
ReportToBB.pm and Untaint.pm
I install them in /usr/local/lib/perl5/site_perl/XymonExt .
Adapt to your local distrib/path
in hosts.cfg, replace pop3s with tls_pop3s and imaps with tls_imaps
For some unknown reason, I don't have this tls 1.3 issue with https. It looks like the tls part of https is not handled the same bad way pop3s/imaps are.
Regards,
-- Laurent Frigault | Free.org - BookMyName.com - ONLINE SAS - Registar ID 74
participants (2)
-
damien＠makelofine.org
-
lolo＠troll.free.org