# \#tls **URL:** https://community.icinga.com/tag/tls/12.md [Latest](https://community.icinga.com/latest.md) · [Categories](https://community.icinga.com/categories.md) · [Tags](https://community.icinga.com/tags.md) --- ## [Client TLS handshake failed - Operation canceled](https://community.icinga.com/t/client-tls-handshake-failed-operation-canceled/13154)
**Author:** [@HExSM](https://community.icinga.com/u/HExSM)\ **Replies:** 2\ **Last updated:** [January 31, 2024, 8:01am UTC](https://community.icinga.com/t/client-tls-handshake-failed-operation-canceled/13154 "2024-01-31T08:01:47Z")
I want to connect an icinga satellite to an icinga master. The icinga satellite is running on-prem and the icinga master on a vps. The on-prem network and the vps network are connected by a Site-to-Site IPSec tunnel. I … --- ## [Own CA for Icinga Cluster/API communication?](https://community.icinga.com/t/own-ca-for-icinga-cluster-api-communication/243)
**Author:** [@dnsmichi](https://community.icinga.com/u/dnsmichi)\ **Replies:** 12\ **Last updated:** [December 16, 2024, 9:50am UTC](https://community.icinga.com/t/own-ca-for-icinga-cluster-api-communication/243 "2024-12-16T09:50:00Z")
Every now and then you may be required to answer the question on “why not use the company’s CA certificates” or “The REST API is not trusted in my browser, fix it”. Here’s some ideas and pros and cons. Please discuss yo… --- ## [Disable specific weak cipher for port 5665](https://community.icinga.com/t/disable-specific-weak-cipher-for-port-5665/12578)
**Author:** [@xion824](https://community.icinga.com/u/xion824)\ **Replies:** 4\ **Last updated:** [September 12, 2023, 12:12pm UTC](https://community.icinga.com/t/disable-specific-weak-cipher-for-port-5665/12578 "2023-09-12T12:12:02Z")
Hey, everyone. Recent Nessus scanning against our Icinga2 host are showing a weak cipher on 5665. Thus far, we have been unable to get the system to disable this cipher. Was hoping the hive mind could help out here. OS:… --- ## [How to monitor for revoked TLS certificates?](https://community.icinga.com/t/how-to-monitor-for-revoked-tls-certificates/2220)
**Author:** [@mrimann](https://community.icinga.com/u/mrimann)\ **Replies:** 5\ **Last updated:** [September 16, 2019, 8:59am UTC](https://community.icinga.com/t/how-to-monitor-for-revoked-tls-certificates/2220 "2019-09-16T08:59:02Z")
Hi We’re monitoring several websites for http and https response-times - and also wether the certificate is valid. All those service checks are executed via the “check\_http” plugin from the monitoring-plugins collection… --- ## [CSR auto-signing fails silently if no ticket\_salt is set in the ApiListener feature configuration](https://community.icinga.com/t/csr-auto-signing-fails-silently-if-no-ticket-salt-is-set-in-the-apilistener-feature-configuration/1808)
**Author:** [@kwisatz](https://community.icinga.com/u/kwisatz)\ **Replies:** 20\ **Last updated:** [July 30, 2019, 1:29pm UTC](https://community.icinga.com/t/csr-auto-signing-fails-silently-if-no-ticket-salt-is-set-in-the-apilistener-feature-configuration/1808 "2019-07-30T13:29:49Z")
Note: This is a reference to a longer thread on https://monitoring-portal.org/t/client-certificate-validation-failed/5732/36 CSR auto-signing doesn’t seem to be working for me and for a bunch of other people in the thre… --- ## [SSL Certificate Durations](https://community.icinga.com/t/ssl-certificate-durations/415)
**Author:** [@ahynes](https://community.icinga.com/u/ahynes)\ **Replies:** 2\ **Last updated:** [February 20, 2019, 8:12am UTC](https://community.icinga.com/t/ssl-certificate-durations/415 "2019-02-20T08:12:48Z")
Is there any way to adjust the duration of SSL certificates the satellites use for communication with the masters, our security group has flagged the long duration as a problem and would like them adjusted to be shorter …