Xormon not accepting external signed certificate

robertday

Hi,

I am currently using the latest version on Xormon 7.81-1 successfully and I am now trying to configure it to use an externally signed certificate. I have followed the install instructions "Optional: using external signed certificate" but it is not working. I have configured the files xormon.p12 and application.properties in /opt/xorux/xormon/config. The application starts but it is not using the external signed certificate but the original self-signed certificate.

I have looked at the log /home/xormon/xormon-data/logs/xormon.log and it makes no attempt to use the config I have set. Excerpt of log as follows:

09:58:16.832 [main] INFO org.apache.coyote.http11.Http11NioProtocol - Starting ProtocolHandler ["https-jsse-nio-8443"]
09:58:17.991 [main] INFO org.apache.tomcat.util.net.NioEndpoint.certificate - Connector [https-jsse-nio-8443], TLS virtual host [_default_], certificate type [UNDEFINED] configured from keystore [jar:file:/opt/xorux/xormon/xormon.war!/WEB-INF/classes!/xormon.p12] using alias [tomcat] with trust store [null]
09:58:18.039 [main] INFO org.springframework.boot.web.embedded.tomcat.TomcatWebServer - Tomcat started on port(s): 8443 (https) with context path ''

Any help would be much appreciated.

For information xormon is running on SLES 15 SP5 and the xormon process is started using systemd service per the instructions.

Cheers,

Rob.

TomasJetelina

make sure you don't edit the template file /opt/xorux/xormon/config/application.properties.template

robertday

https://forum.xorux.com/discussion/comment/6155#Comment_6155

Hi I took a copy of  /opt/xorux/xormon/config/application.properties.template to  /opt/xorux/xormon/config/application.properties and edited that.

robertday

I gave up on trying to get this working. Instead I installed Apache and proxied the xormon application through it using the "Optional: enable UI to run on port 443 instead of default 8443" instructions. I had no problem getting our certificate to work in Apache.

Cheers,

Rob.