Always says it’s down if site uses self-signed certificate / (and also mismatching hostname)

[SJang1]

It always says it’s down when site cert is not trusted.
It needs to have settings like {insecure=true|false} for some sites like mine

[AnandChowdhary]

Can you share a link to your site? Let me see why it doesn't like your certificate. :)

[AnandChowdhary]

This is now fixed, you can use the __dangerous__insecure configuration key in your sites:

sites:
  method: GET
  url: https://desktop.sjang.dev:2364
  __dangerous__insecure: true

Setting the __dangerous__insecure option sets SSL_VERIFYPEER as false. I've added the __dangerous__ prefix to this key to remind people that they should only be setting this as true if they're sure about it!

[wtfpeter]

Hi @AnandChowdhary and sorry for reviving this issue. Can you maybe check if this flag also makes upptime ignore certificate name mismatches? I have a special case where I can't change the certificate but still would like to test availability and the check endpoint step in the uptime action is giving me Current status undefined down 2020-11-23T13:13:49.000Z

[SJang1]

SSL_VERIFYHOST might be help for that, not only VERIFYPEER
@AnandChowdhary

[AnandChowdhary]

Thanks, @SJang1! Let me add an option for that as well. 😄

[AnandChowdhary]

@wtfpeter, you can now add the __dangerous__disable_verify_host option:

sites:
  method: GET
  url: https://desktop.sjang.dev:2364
  __dangerous__disable_verify_host: true

[SJang1]

Hmm.. it is an also insecure option, how about changing to VERIFYPEER and VERIFYHOST both into __dangerous__insecure option? (curl --insecure command on linux works like that too)

[AnandChowdhary]

Ok, I've added an update that works like this:

• __dangerous__disable_verify_peer will only disable peer verification (what we had initially)
• __dangerous__disable_verify_host will only disable host verification (what we added today)
• __dangerous__insecure will disable both

[wtfpeter]

Thanks a lot for the quick reaction, I can confirm both __dangerous__disable_verify_host and __dangerous__insecure work for me.