DX ASM Monitors fail

Products

• DX SaaS
• CA App Synthetic Monitor

Issue/Introduction

ASM Monitors fail with "Error: "unknown error: net::ERR_TUNNEL_CONNECTION_FAILED"

Environment

DX ASM 

OPMS 

Cause

Engineering reviewed and found the root cause for this problem.

The problem is in the SSL certificate which is being used by the checked host

The intermediate certificate in the chain is required, but it's not being sent by the server during the handshake.

This fails the connection by our SSL client.

Please note, the web browser will download this certificate, but other clients will not

Resolution

The resolution for this problem can be done in two ways:

1. The workaround is to unselect the option 'Verify certificate' in the monitor's preferences. But it has the cost: the customer will miss an alert if the certificate expires or has other issues.
2. The fix is to update the server configuration to include the intermediate cert in the response.