KS-Soft. Network Management Solutions
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister    ProfileProfile    Log inLog in 

Certificate check. Error: SSL handshake failed.

 
Post new topic   Reply to topic    KS-Soft Forum Index -> Bug reports
View previous topic :: View next topic  
Author Message
RogerSpraggon



Joined: 19 Mar 2012
Posts: 51

PostPosted: Tue Jul 17, 2018 8:44 pm    Post subject: Certificate check. Error: SSL handshake failed. Reply with quote

I have a number of certificate tests that regularly fail with the above message (Status shows "Unknown") but usually with a retest you can get a successful test. Is there a parameter or something that I can change to avoid these "false positives"
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12337
Location: USA

PostPosted: Wed Jul 18, 2018 1:36 am    Post subject: Reply with quote

HostMonitor version?
Windows?
Service Pack?
Antivirus monitor?
Protocols supported on the server (SSL/TLS)?
What timeout did you set for the test?
What error message do you see in Reply field of the test?

"false positives"?
Unknown status means HostMonitor cannot retrieve necessary information. May be there is network problem, may be target server too slow, may be you set too short timeout, may be there is some problem on HostMonitor system.
It is not "false". I think its better to find the reason of the problem. You may setup additional tests for this server: Ping test, Trace test, URL test (if you are checking web server), check resource usage on the server using CPU Usage, Memory, Dominant Process, etc.

If you want to ignore the problem, disable "Treat Unknown status as Bad" option (Test Properties dialog), also you may use "Action depends on Bad one" option (Action Properties dialog).
Another option: add "repeat test" action using expression like ('%Status%'=='Unknown') and (%Recurrences%==1)

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
RogerSpraggon



Joined: 19 Mar 2012
Posts: 51

PostPosted: Wed Jul 18, 2018 9:30 pm    Post subject: Reply with quote

HostMonitor version? 11.24
Windows? 2008R2
Service Pack? SP1
Antivirus monitor? Trend Micro OfficeScan
Protocols supported on the server (SSL/TLS)?
What timeout did you set for the test? 60 seconds
What error message do you see in Reply field of the test? Error: SSL handshake failed
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12337
Location: USA

PostPosted: Thu Jul 19, 2018 7:07 am    Post subject: Reply with quote

60 sec is more than enough.
Error: SSL handshake failed? May be there are several web servers and some load balancer? In such case the same HostMonitor test may connect to different web servers?

Protocols supported on the server (SSL/TLS)?

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
RogerSpraggon



Joined: 19 Mar 2012
Posts: 51

PostPosted: Mon Jul 23, 2018 5:24 pm    Post subject: Reply with quote

There is only 1 server (no load Balancer)
Protocol SSL
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12337
Location: USA

PostPosted: Tue Jul 24, 2018 3:57 am    Post subject: Reply with quote

SSL 3.0 is not secure and should be disabled. If you install IE 11, SSL will be disabled on the system (then you can modify hostmon.ini to enable it for some tests).
If you cannot enable TLS 1.2 for some reasons, please provide access to the server, we can try to check what is wrong

Before this, please disable antivirus, may be it leads to the problem.

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    KS-Soft Forum Index -> Bug reports All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

KS-Soft Forum Index