Re: check_pop plugin poodle vulnerability

B <[email protected]> Mon, 20 Oct 2014 13:21:08 +0800
Newsgroups gmane.network.nagios.plugins
Message-ID <BLU436-SMTP216E3A5D1649B7CB63A8DA5CD970__21663.2324540571$1413782491$gmane$org@phx.gbl>
Looks like it's coming from check_tcp. You better run a tcpdump seeing 
what happens in SSL handshake first.
-B
On 10/19/2014 9:43 PM, Andrew Nemeth wrote:
> Hello,
>
> We recently disabled SSLv3 and SSLv2 due to the poodle and other
> vulnerabilities however the plugins (both smtps and pop3s plugins) are now
> failing with the following:
>
> root@estonia:/usr/local/nagios/etc/check_multi#
> /usr/local/nagios/libexec/check_spop -a 184.170.132.66
> CRITICAL - Cannot make SSL connection
> 12515:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
> handshake failure:s23_clnt.c:596:
>
> Could you advise how we can check against TLS instead?
>
> Thank you,
>
> Andrew
>