Re: [nagios-plugins] Expanded SSL Version Selection; Example Use in check_http [sf#3612263] (#1137)

j-bern <notifications-9UaJU3cA/F/[email protected]> Fri, 04 Oct 2013 07:50:16 -0700
Newsgroups gmane.network.nagios.plugins.devel
Message-ID <nagios-plugins/nagios-plugins/issues/1137/[email protected]>
--===============0337098755274832250==
Content-Type: multipart/alternative;
	boundary="--==_mimepart_524ed5a8b9a15_6c37f55d34663a7";
	charset=UTF-8
Content-Transfer-Encoding: 7bit

----==_mimepart_524ed5a8b9a15_6c37f55d34663a7
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

FYI: Tried with 1.5 today, SSLv2 connections to the app in question are still denied:

# plugins/check_http -V
check_http v1.5 (nagios-plugins 1.5)
# plugins/check_http $CUSTOMERAPP --ssl=1
HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.026 second response time |time=0.025818s;;;0.000000 size=130B;;;0
# plugins/check_http $CUSTOMERAPP --ssl=2
CRITICAL - Cannot make SSL connection.
# plugins/check_http $CUSTOMERAPP --ssl=3
HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.070 second response time |time=0.069680s;;;0.000000 size=130B;;;0

*But* since IE8 apparently has the same problem, the app developers made sure that requests *without* SSL/TLS version restriction now succeed:

# /usr/lib64/nagios/plugins/check_http -V
check_http v1.4.16 (nagios-plugins 1.4.16)
# /usr/lib64/nagios/plugins/check_http $CUSTOMERAPP --ssl
HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.039 second response time |time=0.039499s;;;0.000000 size=130B;;;0

- so the issue can stay closed.

---
Reply to this email directly or view it on GitHub:
https://github.com/nagios-plugins/nagios-plugins/issues/1137#issuecomment-25704368
----==_mimepart_524ed5a8b9a15_6c37f55d34663a7
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

<p>FYI: Tried with 1.5 today, SSLv2 connections to the app in question are still denied:</p>

<h1>plugins/check_http -V</h1>

<p>check_http v1.5 (nagios-plugins 1.5)</p>

<h1>plugins/check_http $CUSTOMERAPP --ssl=1</h1>

<p>HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.026 second response time |time=0.025818s;;;0.000000 size=130B;;;0</p>

<h1>plugins/check_http $CUSTOMERAPP --ssl=2</h1>

<p>CRITICAL - Cannot make SSL connection.</p>

<h1>plugins/check_http $CUSTOMERAPP --ssl=3</h1>

<p>HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.070 second response time |time=0.069680s;;;0.000000 size=130B;;;0</p>

<p><em>But</em> since IE8 apparently has the same problem, the app developers made sure that requests <em>without</em> SSL/TLS version restriction now succeed:</p>

<h1>/usr/lib64/nagios/plugins/check_http -V</h1>

<p>check_http v1.4.16 (nagios-plugins 1.4.16)</p>

<h1>/usr/lib64/nagios/plugins/check_http $CUSTOMERAPP --ssl</h1>

<p>HTTP WARNING: HTTP/1.1 400 Bad Request - 130 bytes in 0.039 second response time |time=0.039499s;;;0.000000 size=130B;;;0</p>

<ul>
<li>so the issue can stay closed.</li>
</ul>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">&mdash;<br>Reply to this email directly or <a href='https://github.com/nagios-plugins/nagios-plugins/issues/1137#issuecomment-25704368'>view it on GitHub</a>.<img src='https://github.com/notifications/beacon/_EHT0K2RMtzboqJPrl-P-EujlvZhOSp0a4G1wHReokLD16BWXmjSWouAUwFO2AVm.gif' height='1' width='1'></p>
----==_mimepart_524ed5a8b9a15_6c37f55d34663a7--


--===============0337098755274832250==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60134791&iu=/4140/ostg.clktrk
--===============0337098755274832250==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________________
Nagios Plugin Development Mailing List Nagiosplug-devel-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
Unsubscribe at https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel
::: Please include plugins version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null
--===============0337098755274832250==--