[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Setting up SSL
From: |
Christian Hopp |
Subject: |
Re: Setting up SSL |
Date: |
Mon, 24 May 2004 10:18:00 +0200 (CEST) |
On Fri, 21 May 2004, Jon Evans wrote:
> Hi,
>
> I want my Monit server to be open to the whole company (so service
> checks can be carried out wherever I happen to be) but also secured by
> password, and also SSL so the password cannot be sniffed.
(...)
> monit: check_preverify(): SSL connection rejected because certificate
> verification has failed -- Error 20
> monit: embed_accepted_ssl_socket(): Openssl engine error:
> error:140890B2:SSL routines:func(137):reason(178)
>
> a brief google search tells me that func(137) is
> ENGINE_R_INVALID_CMD_NAME and reason(178) is ENGINE_F_ENGINE_CTRL_CMD
> but apart from that I'm out of my depth.
>
> My test config file starts with:
> set httpd port 2812
> ssl enable
> pemfile /home/evansj/cert/monit.pem
> allow admin:monit
You have to specifically allow selfcertified certificates...
set httpd port 2812
ssl enable
pemfile /home/evansj/cert/monit.pem
allowselfcertification
allow admin:monit
Hope that helps...
Christian
--
Christian Hopp email: address@hidden
Institut für Elektrische Informationstechnik fon: +49-5323-72-2113
TU Clausthal, Leibnizstr. 28, 38678 Clausthal-Zellerf. fax: +49-5323-72-3197
pgpkey: https://www.iei.tu-clausthal.de/pgp-keys/