添加链接
link管理
链接快照平台
  • 输入网页链接,自动生成快照
  • 标签化管理网页链接
Hello,
it is currently impossible to build nagios-plugins against an OpenSSL installation without SSLv3 support because plugins/sslutils.c uses SSLv3 functions without checking whether they even exist. Such a check is present for the SSLv2 support, but as SSLv3 is also ancient and has known weaknesses, it is getting more likely to encounter OpenSSL installations that have SSLv3 support disabled.
The FreeBSD port of nagios-plugins is currently using the following patch to allow the build to succeed; I think it can be used verbatim here, too:

Code: Select all

--- plugins/sslutils.c.orig	2016-01-14 20:02:06.419867000 +0100
+++ plugins/sslutils.c	2016-01-14 20:01:36.091492000 +0100
@@ -70,8 +70,13 @@
 #endif
 		break;
 	case 3: /* SSLv3 protocol */
+#if defined(OPENSSL_NO_SSL3)
+		printf(("%s\n", _("CRITICAL - SSL protocol version 3 is not supported by your SSL library.")));
+		return STATE_CRITICAL;
+#else
 		method = SSLv3_client_method();
 		ssl_options = SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1;
+#endif
 		break;
 	default: /* Unsupported */
 		printf("%s\n", _("CRITICAL - Unsupported SSL protocol version."));
			
Thanks for the patch! Mind if I move this to the GitHub? https://github.com/nagios-plugins/nagios-plugins/
It will get more traction there. Otherwise if you have an account already a pull request will improve the response time.
  • Community Support Forums For Nagios Commercial Products
  • ↳   Nagios XI
  • ↳   Nagios Log Server
  • ↳   Nagios Network Analyzer
  • ↳   Nagios Fusion
  • ↳   Development on Github
  • ↳   Nagios Core
  • ↳   Nagios Plugins
  • ↳   NCPA
  • Community Support Forums For Nagios Open Source Projects
  • ↳   Open Source Nagios Projects
  •