This is a fork
of DSI Centrale
Méditerranée's poolmon (originally published
by Brad
Davidson) with which adopts the code to modern
IO::Socket::SSL perl module.
Newer versions of IO::Socket::SSL validate the
hostname used for establishing the connection against
the X509v3 Subject Alternative Name field of the
server's certificate. As poolmon used the IP address
(provided by dovecot director status), this
validation will fail unless the IP addresses are also included in
the server's certificate. The modified version
of poolmon provided here, has to options to fix
this:
--resolve-hostname will do a reverse DNS lookup on the IP address and use the found hostname.--no-hostname-verify will instruct IO::Socket::SSL to disable hostname validation when connecting to the server.It is recommended to use the first option! The second option --no-hostname-verify only works by weakening the SSL security.
The current version of my poolmon
can be found here: