Certificate check. Error: SSL handshake failed.

RogerSpraggon · Post by **RogerSpraggon** » Tue Jul 17, 2018 8:44 pm

I have a number of certificate tests that regularly fail with the above message (Status shows "Unknown") but usually with a retest you can get a successful test. Is there a parameter or something that I can change to avoid these "false positives"

KS-Soft · Post by **KS-Soft** » Wed Jul 18, 2018 1:36 am

HostMonitor version?
Windows?
Service Pack?
Antivirus monitor?
Protocols supported on the server (SSL/TLS)?
What timeout did you set for the test?
What error message do you see in Reply field of the test?

"false positives"?
Unknown status means HostMonitor cannot retrieve necessary information. May be there is network problem, may be target server too slow, may be you set too short timeout, may be there is some problem on HostMonitor system.
It is not "false". I think its better to find the reason of the problem. You may setup additional tests for this server: Ping test, Trace test, URL test (if you are checking web server), check resource usage on the server using CPU Usage, Memory, Dominant Process, etc.

If you want to ignore the problem, disable "Treat Unknown status as Bad" option (Test Properties dialog), also you may use "Action depends on Bad one" option (Action Properties dialog).
Another option: add "repeat test" action using expression like ('%Status%'=='Unknown') and (%Recurrences%==1)

Regards
Alex

RogerSpraggon · Post by **RogerSpraggon** » Wed Jul 18, 2018 9:30 pm

HostMonitor version? 11.24
Windows? 2008R2
Service Pack? SP1
Antivirus monitor? Trend Micro OfficeScan
Protocols supported on the server (SSL/TLS)?
What timeout did you set for the test? 60 seconds
What error message do you see in Reply field of the test? Error: SSL handshake failed

KS-Soft · Post by **KS-Soft** » Thu Jul 19, 2018 7:07 am

60 sec is more than enough.
Error: SSL handshake failed? May be there are several web servers and some load balancer? In such case the same HostMonitor test may connect to different web servers?

Protocols supported on the server (SSL/TLS)?

Regards
Alex

RogerSpraggon · Post by **RogerSpraggon** » Mon Jul 23, 2018 5:24 pm

There is only 1 server (no load Balancer)
Protocol SSL

KS-Soft · Post by **KS-Soft** » Tue Jul 24, 2018 3:57 am

SSL 3.0 is not secure and should be disabled. If you install IE 11, SSL will be disabled on the system (then you can modify hostmon.ini to enable it for some tests).
If you cannot enable TLS 1.2 for some reasons, please provide access to the server, we can try to check what is wrong

Before this, please disable antivirus, may be it leads to the problem.

Regards
Alex