Re: ssl: unsafe legacy renegotiation

sashk via This is the general mailing list for monit <[email protected]> Thu, 9 Feb 2023 14:22:50 -0500

Newsgroups	gmane.comp.monitoring.monit.general
Message-ID	<[email protected]>

Hi,

> Google the error and solution. Either update SSL on the cable modem “server” if you can or modify Monit (the client) yourself. 


Upgrading ssl is not possible on cable modem, therefore as I stated in my original email:
>>  It seems re-configuring OpenSSL it is possible to do systemwide, but I would like to avoid doing so.

I was hoping there is a way, similar to ssl options {version: TLSV1,... } to enable this setting just for this particular check in monit, not systemwide, as this opens system to CVE-2009-3555.

Thanks.