[nagiosplug] sslutils: Check if OpenSSL supports SSLv2.

"Nagios Plugin Development" <[email protected]> Wed, 6 Jun 2012 15:10:11 +0000
Newsgroups gmane.network.nagios.plugins.cvs
Message-ID <[email protected]>
 Module: nagiosplug
 Branch: master
 Commit: 679a2296065893fd428891d610499c04a50aaa29
 Author: Sebastian Harl <[email protected]>
   Date: Wed Jun  6 13:47:39 2012 +0200
    URL: http://nagiosplug.git.sf.net/git/gitweb.cgi?p=nagiosplug/nagiosplug;a=commit;h=679a229

sslutils: Check if OpenSSL supports SSLv2.

Recent versions/builds seem to disable that feature.

---

 plugins/sslutils.c |    5 +++++
 1 files changed, 5 insertions(+), 0 deletions(-)

diff --git a/plugins/sslutils.c b/plugins/sslutils.c
index 2157764..4e3fc4e 100644
--- a/plugins/sslutils.c
+++ b/plugins/sslutils.c
@@ -55,7 +55,12 @@ int np_net_ssl_init_with_hostname_and_version (int sd, char *host_name, int vers
 			method = TLSv1_client_method();
 			break;
 		case 2: /* SSLv2 protocol */
+#ifdef OPENSSL_NO_SSL2
+			printf (("%s\n", _("CRITICAL - SSL Protocol Version 2 is not supported by your build of OpenSSL.")));
+			return STATE_CRITICAL;
+#else
 			method = SSLv2_client_method();
+#endif
 			break;
 		case 3: /* SSLv3 protocol */
 			method = SSLv3_client_method();


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/