[ nagiosplug-Feature Requests-3574197 ] check_ssh add --fingerprint option

Feature Requests item #3574197, was opened at 2012-10-03 11:07
Message generated for change (Comment added) made by hjanuschka
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=397600&aid=3574197&group_id=29880

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Marc Haber (zugschlus)
Assigned to: Nobody/Anonymous (nobody)
Summary: check_ssh add --fingerprint option

Initial Comment:
Hi,

please consider adding to the check_ssh plugin a check whether the fingerprint is what we expected. One would configure into the check the expected fingerprint, and the check would go into warning or critical if the fingerprint presented by the remote sshd is not what we expected.

Greetings
Marc


----------------------------------------------------------------------

Comment By: Helmut Januschka (hjanuschka)
Date: 2012-12-04 05:02

Message:
checkout the git pull request
https://github.com/nagios-plugins/nagios-plugins/pull/26


i have reworked the check_ssh - using libssh to check version and
fingerprint (instead of serverhello version guessing)

----------------------------------------------------------------------

Comment By: J. Bern (j-bern)
Date: 2012-10-03 11:52

Message:
I'm afraid that you're expecting a bit much from good ol' check_ssh here.
It makes the TCP connection and has a look at the server hello to determine
the server's versions, but it never proceeds into the crypto setup stages,
which it would need to do to actually obtain the server's pubkey.

However, any service check using *check_by_ssh* against the target machine
- and assuming the usual ssh config params - should yell bloody murder
(well, actually "@@@@@@@@@@@@",the first line of ssh's "someone might be
doing something nasty" warning) when the host's pubkey has changed.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=397600&aid=3574197&group_id=29880

------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________________
Nagios Plugin Development Mailing List Nagiosplug-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
Unsubscribe at https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel
::: Please include plugins version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null