Re: check_http - support TLS v1.2 (#1338)
J Adams <[email protected]> Tue, 15 Sep 2015 07:18:40 -0400
| Newsgroups | gmane.network.nagios.devel |
|---|---|
| Message-ID | <CAAQ7XOSr52jn+JW+sKSyVAYnA-Ugpy4JzHOVLprDO5ex66xttg__48333.1642034047$1442315981$gmane$org@mail.gmail.com> |
--ssl=1 turns off auto negotiation. Against a site that offers only 1.2, using -S without specifying the version works for me. On Tue, Sep 15, 2015 at 6:00 AM, seccentral <[email protected]> wrote: > Don't know about their/his/her setup but i've tried and by default it's > auto (right ? manual sais so anyway) > " -S, --ssl=VERSION > Connect via SSL. Port defaults to 443. VERSION is optional, and prevents > auto-negotiation (1 = TLSv1, 2 = SSLv2, 3 = SSLv3)." > so even if i use -S --ssl=1 it still fails. albeit with a different error: > (with --ssl=1) > CRITICAL - Cannot make SSL connection. > 140318164997776:error:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert > internal error:s3_pkt.c:1294:SSL alert number 80 > > — > Reply to this email on GitHub > <https://github.com/monitoring-plugins/monitoring-plugins/issues/1338#issuecomment-140342586> > . >