Re: Setting up SSL

[Christian Hopp]

On Fri, 21 May 2004, Jon Evans wrote:

> Hi,
>
> I want my Monit server to be open to the whole company (so service
> checks can be carried out wherever I happen to be) but also secured by
> password, and also SSL so the password cannot be sniffed.

(...)

> monit: check_preverify(): SSL connection rejected because certificate
> verification has failed -- Error 20
> monit: embed_accepted_ssl_socket(): Openssl engine error:
> error:140890B2:SSL routines:func(137):reason(178)
>
> a brief google search tells me that func(137) is
> ENGINE_R_INVALID_CMD_NAME and reason(178) is ENGINE_F_ENGINE_CTRL_CMD
> but apart from that I'm out of my depth.
>
> My test config file starts with:
> set httpd port 2812
>          ssl enable
>          pemfile /home/evansj/cert/monit.pem
>          allow admin:monit

You have to specifically allow selfcertified certificates...

set httpd port 2812
         ssl enable
         pemfile /home/evansj/cert/monit.pem
         allowselfcertification
         allow admin:monit

Hope that helps...

Christian

-- 
Christian Hopp                                email: address@hidden
Institut für Elektrische Informationstechnik             fon: +49-5323-72-2113
TU Clausthal, Leibnizstr. 28, 38678 Clausthal-Zellerf.   fax: +49-5323-72-3197
                             pgpkey: https://www.iei.tu-clausthal.de/pgp-keys/