Re: [nagios-plugins] Expanded SSL Version Selection; Example Use in check_http [sf#3612263] (#1137)
j-bern <notifications-9UaJU3cA/F/[email protected]> Fri, 04 Oct 2013 07:50:16 -0700
| Newsgroups | gmane.network.nagios.plugins.devel |
|---|---|
| Message-ID | <nagios-plugins/nagios-plugins/issues/1137/[email protected]> |
--===============0337098755274832250== Content-Type: multipart/alternative; boundary="--==_mimepart_524ed5a8b9a15_6c37f55d34663a7"; charset=UTF-8 Content-Transfer-Encoding: 7bit ----==_mimepart_524ed5a8b9a15_6c37f55d34663a7 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit FYI: Tried with 1.5 today, SSLv2 connections to the app in question are still denied: # plugins/check_http -V check_http v1.5 (nagios-plugins 1.5) # plugins/check_http $CUSTOMERAPP --ssl=1 HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.026 second response time |time=0.025818s;;;0.000000 size=130B;;;0 # plugins/check_http $CUSTOMERAPP --ssl=2 CRITICAL - Cannot make SSL connection. # plugins/check_http $CUSTOMERAPP --ssl=3 HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.070 second response time |time=0.069680s;;;0.000000 size=130B;;;0 *But* since IE8 apparently has the same problem, the app developers made sure that requests *without* SSL/TLS version restriction now succeed: # /usr/lib64/nagios/plugins/check_http -V check_http v1.4.16 (nagios-plugins 1.4.16) # /usr/lib64/nagios/plugins/check_http $CUSTOMERAPP --ssl HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.039 second response time |time=0.039499s;;;0.000000 size=130B;;;0 - so the issue can stay closed. --- Reply to this email directly or view it on GitHub: https://github.com/nagios-plugins/nagios-plugins/issues/1137#issuecomment-25704368 ----==_mimepart_524ed5a8b9a15_6c37f55d34663a7 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <p>FYI: Tried with 1.5 today, SSLv2 connections to the app in question are still denied:</p> <h1>plugins/check_http -V</h1> <p>check_http v1.5 (nagios-plugins 1.5)</p> <h1>plugins/check_http $CUSTOMERAPP --ssl=1</h1> <p>HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.026 second response time |time=0.025818s;;;0.000000 size=130B;;;0</p> <h1>plugins/check_http $CUSTOMERAPP --ssl=2</h1> <p>CRITICAL - Cannot make SSL connection.</p> <h1>plugins/check_http $CUSTOMERAPP --ssl=3</h1> <p>HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.070 second response time |time=0.069680s;;;0.000000 size=130B;;;0</p> <p><em>But</em> since IE8 apparently has the same problem, the app developers made sure that requests <em>without</em> SSL/TLS version restriction now succeed:</p> <h1>/usr/lib64/nagios/plugins/check_http -V</h1> <p>check_http v1.4.16 (nagios-plugins 1.4.16)</p> <h1>/usr/lib64/nagios/plugins/check_http $CUSTOMERAPP --ssl</h1> <p>HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.039 second response time |time=0.039499s;;;0.000000 size=130B;;;0</p> <ul> <li>so the issue can stay closed.</li> </ul> <p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br>Reply to this email directly or <a href='https://github.com/nagios-plugins/nagios-plugins/issues/1137#issuecomment-25704368'>view it on GitHub</a>.<img src='https://github.com/notifications/beacon/_EHT0K2RMtzboqJPrl-P-EujlvZhOSp0a4G1wHReokLD16BWXmjSWouAUwFO2AVm.gif' height='1' width='1'></p> ----==_mimepart_524ed5a8b9a15_6c37f55d34663a7-- --===============0337098755274832250== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk --===============0337098755274832250== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________________ Nagios Plugin Development Mailing List Nagiosplug-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org Unsubscribe at https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel ::: Please include plugins version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null --===============0337098755274832250==--