Details

    • Type: Enhancement
    • Status: Resolved (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 19.0.0, Meridian-2017.1.0
    • Component/s: None
    • Labels:
      None

      Description

      According to docs.opennms.org, the SSLCertMonitor "does not support Server Name Indication (SNI) and so is unable to validate different certificates if they would be presented on the same connection".

      This makes the monitor unusable, at least for most usecases that involve validating webserver certificates.

      To resolve the issue, the monitor should be enhanced by adding SNI support.

        Activity

        Show
        fooker Dustin Frisch added a comment - According to the docs, it does since 19.0.0: http://docs.opennms.org/opennms/releases/19.0.0/guide-admin/guide-admin.html#_sslcertmonitor Was fixed by: https://github.com/OpenNMS/opennms/pull/1112
        Hide
        reissmann Sven Reissmann added a comment -

        Then, the documentation should be updated accordingly.

        http://docs.opennms.org/opennms/releases/19.0.0/guide-admin/guide-admin.html#_sslcertmonitor still has the sentence "Additionally, it does not support Server Name Indication (SNI) and so is unable to validate different certificates if they would be presented on the same connection."

        Show
        reissmann Sven Reissmann added a comment - Then, the documentation should be updated accordingly. http://docs.opennms.org/opennms/releases/19.0.0/guide-admin/guide-admin.html#_sslcertmonitor still has the sentence "Additionally, it does not support Server Name Indication (SNI) and so is unable to validate different certificates if they would be presented on the same connection."
        Hide
        fooker Dustin Frisch added a comment -
        Show
        fooker Dustin Frisch added a comment - You're right. PR: https://github.com/OpenNMS/opennms/pull/1532

          People

          • Assignee:
            fooker Dustin Frisch
            Reporter:
            reissmann Sven Reissmann
          • Votes:
            2 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development