I’m trying to use the icingaweb x509 module to at least inventory all the certs on my network, and the SNI functionality doesn’t seem to actually work. I have a couple of SNI maps in place, and they do show up. but rather than finding the different certificates for each of the hostnames, it only finds the first hostname in the list and doesn’t find the certificates for the rest. Worse, it shows all of the hostnames listed in the SNI mapping as being associated with the certificate that it does find (the target hostname in the database is literally “\r\r…”), which obviously is incorrect. So am I doing something wrong, or does the SNI functionality just not work? I tried entering multiple SNI mappings for a single IP address, but that’s not allowed.
- Icinga Web 2 version: 2.12.2
- Used modules and their versions (System - About):
- icingadb: 1.1.3
- cube: 1.3.3
- doc: 2.12.2
- graphite: 1.2.4
- x509: 1.3.2
- Web browser used: Firefox 128.7.0esr (RHEL 9)
- Icinga 2 version used (
icinga2 --version): r2.14.5-1 - PHP version used (
php --version): 8.2.25 - Server operating system and version: RHEL 9.5