check_pop plugin poodle vulnerability

"Andrew Nemeth" <[email protected]> Sun, 19 Oct 2014 13:43:42 -0000

Newsgroups	gmane.network.nagios.plugins
Message-ID	<d1b74cf6837b0d40671bae4a5116b995.squirrel__874.657827853476$1413753497$gmane$org@emergencysupport.us>

Hello,

We recently disabled SSLv3 and SSLv2 due to the poodle and other
vulnerabilities however the plugins (both smtps and pop3s plugins) are now
failing with the following:

root@estonia:/usr/local/nagios/etc/check_multi#
/usr/local/nagios/libexec/check_spop -a 184.170.132.66
CRITICAL - Cannot make SSL connection
12515:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
handshake failure:s23_clnt.c:596:

Could you advise how we can check against TLS instead?

Thank you,

Andrew