Re: Disable RFC4507 support issues
Holger Weiß <[email protected]>
| Newsgroups | gmane.network.nagios.plugins |
|---|---|
| Organization | Freie Universität Berlin |
| Message-ID | <[email protected]> |
* Andrew Widdersheim <[email protected]> [2012-07-06 19:19]: > * Disable RFC4507 support, to work around SSL negotiation issues with > (at least) some Tomcat versions > > Saw the above as a fix in the new release which is awesome because it > is a major pain with some systems. > > The problem I'm seeing is the release notes make it sound as though > this is done by default but from what I'm seeing the only way to turn > that fix on is by defining SSL_OP_NO_TICKET using CFLAGS unless I am > missing something. This is the commit that introduced the change: https://github.com/nagios-plugins/nagios-plugins/commit/5a5d3d7013dbc0 SSL_OP_NO_TICKET is defined by OpenSSL itself, but only by versions which actually support RFC4507 (that is, versions >= 0.9.8f). The "#ifdef SSL_OP_NO_TICKET" you probably stumbled over makes sure that the plugins can be built against older OpenSSL versions. Are you still seeing SSL negotiation problems when using the new release? Holger ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Nagiosplug-help mailing list Nagiosplug-help-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org https://lists.sourceforge.net/lists/listinfo/nagiosplug-help ::: Please include plugins version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null