KBI 312022 Issue Addressed: Argent Sentry Ultra Failed To Monitor Secured Websites Due To Certificate Error

Version

Argent Advanced Technology 5.1A-2210-A and below

Date

Wednesday, 9 Nov 2022

Summary

Argent Sentry Ultra throws a certificate error when there is a mismatch between the name on the security certificate and the name of the actual website

Sync with Website shows security error warning message says “The name on the security certificate is invalid or does not match the name of the site”.

Technical Background

The load balancer has multiple hosts behind it and the certificate is issued for the common web address exposed by load balancer

When monitoring individual hosts behind the load balancer, the certificate does not match as there is a difference in name

Argent Sentry Ultra has been enhanced to ignore the following certificate related errors while monitoring secured websites:

  • Certificate from invalid certificate authority
  • Identity of a server to be established with a non-server certificate (for example, a client certificate)
  • Invalid common name in a certificate; that is, the server name specified by the application does not match the common name in the certificate
  • Invalid certificate date, that is, an expired or not-yet-effective certificate

To override certificate related errors, set the field Ignore Certificate Error to True before proceeding to configure the field ‘Vital URLs To Check’

Resolution

Upgrade to Argent Advanced Technology 5.1A-2301-A or above