How to monitor SSL certificate for self signed for linux server using "SSL Certificate Sensor"

Hi there,

Please make sure that you have entered the FQDN/Domain in the device settings and the same Domain in the sensor settings. The sensor always connects against the device connection IP/DNS-Name and checks the entered SNI in the sensor settings. If unsure, please write the entered device IP/DNS-Name and the sensor settings "SNI-Option" down here so we can check if they will work.

Best regards.

Hello,

SSL Certificate Specific Port : 443 Virtual Host (SNI Domain): ftp.test.com Certificate Name Validation: Do not compare common name with device address or SNI (default) Connection Specific: Do not use SOCKS proxy (default)

When I add it I am getting this error:

Failed to establish secure connection [Step 0] Socket Error # 10060 Connection timed out. [Step 1] Socket Error # 10060 Connection timed out. [Step 2] Socket Error # 10060 Connection timed out. [Step 3] Socket Error # 10060 Connection timed out. [Step 4] Socket Error # 10060 Connection timed out. [Step 5] Socket Error # 10060 Connection timed out.

Hi there,

The settings seem to be correct. What is the device's connection IP/DNS-Name?

Best regards.

Hello,

I am using following DNS-Name: ftp.allisptest.eu which is having the self-signed certificate and resolves to proper IP.

Thanks.

Hi there,

Then this will not work as the entered SNI "ftp.test.com" is not correct. Please enter into the sensor settings the same FQDN you use in the device settings. So please change the SNI-Setting in the sensor settings to "ftp.allisptest.eu" instead. Does that work properly?

So:

• Device Connection IP/DNS-Name: ftp.allisptest.eu
• Sensor's SNI Setting: ftp.allisptest.eu
  
  Best regards.