View previous topic :: View next topic |
Author |
Message |
RogerSpraggon
Joined: 19 Mar 2012 Posts: 59
|
Posted: Tue Jul 17, 2018 8:44 pm Post subject: Certificate check. Error: SSL handshake failed. |
|
|
I have a number of certificate tests that regularly fail with the above message (Status shows "Unknown") but usually with a retest you can get a successful test. Is there a parameter or something that I can change to avoid these "false positives" |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12801 Location: USA
|
Posted: Wed Jul 18, 2018 1:36 am Post subject: |
|
|
HostMonitor version?
Windows?
Service Pack?
Antivirus monitor?
Protocols supported on the server (SSL/TLS)?
What timeout did you set for the test?
What error message do you see in Reply field of the test?
"false positives"?
Unknown status means HostMonitor cannot retrieve necessary information. May be there is network problem, may be target server too slow, may be you set too short timeout, may be there is some problem on HostMonitor system.
It is not "false". I think its better to find the reason of the problem. You may setup additional tests for this server: Ping test, Trace test, URL test (if you are checking web server), check resource usage on the server using CPU Usage, Memory, Dominant Process, etc.
If you want to ignore the problem, disable "Treat Unknown status as Bad" option (Test Properties dialog), also you may use "Action depends on Bad one" option (Action Properties dialog).
Another option: add "repeat test" action using expression like ('%Status%'=='Unknown') and (%Recurrences%==1)
Regards
Alex |
|
Back to top |
|
|
RogerSpraggon
Joined: 19 Mar 2012 Posts: 59
|
Posted: Wed Jul 18, 2018 9:30 pm Post subject: |
|
|
HostMonitor version? 11.24
Windows? 2008R2
Service Pack? SP1
Antivirus monitor? Trend Micro OfficeScan
Protocols supported on the server (SSL/TLS)?
What timeout did you set for the test? 60 seconds
What error message do you see in Reply field of the test? Error: SSL handshake failed |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12801 Location: USA
|
Posted: Thu Jul 19, 2018 7:07 am Post subject: |
|
|
60 sec is more than enough.
Error: SSL handshake failed? May be there are several web servers and some load balancer? In such case the same HostMonitor test may connect to different web servers?
Protocols supported on the server (SSL/TLS)?
Regards
Alex |
|
Back to top |
|
|
RogerSpraggon
Joined: 19 Mar 2012 Posts: 59
|
Posted: Mon Jul 23, 2018 5:24 pm Post subject: |
|
|
There is only 1 server (no load Balancer)
Protocol SSL |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12801 Location: USA
|
Posted: Tue Jul 24, 2018 3:57 am Post subject: |
|
|
SSL 3.0 is not secure and should be disabled. If you install IE 11, SSL will be disabled on the system (then you can modify hostmon.ini to enable it for some tests).
If you cannot enable TLS 1.2 for some reasons, please provide access to the server, we can try to check what is wrong
Before this, please disable antivirus, may be it leads to the problem.
Regards
Alex |
|
Back to top |
|
|
|