Re: check_http - support TLS v1.2 (#1338)
Stuart Henderson <[email protected]> Fri, 28 Aug 2015 07:34:18 +0000 (UTC)
| Newsgroups | gmane.network.nagios.devel,gmane.network.monitoring.plugins.devel |
|---|---|
| Message-ID | <[email protected]> |
On 2015-08-27, Jason Wilkinson <[email protected]> wrote: > > Some QSAs are starting to vail PCI scans when TLSv1 is enabled. They've > already disallowed SSLv2 and SSLv3. That means that there are no checks that > would be available via SSL with this command unless it's extended to support > TLSv1.1 and TLSv1.2. This needs to be updated for this plugin to be useful > in any environment that has PCI implications. It should still connect when you use auto-negotiation.