Build with OpenSSL without SSLv3 support - Nagios Support Forum

link管理

链接快照平台

输入网页链接，自动生成快照
标签化管理网页链接

相关文章推荐

英俊的野马 · Openssl not found in ...· 1 周前 ·

不敢表白的钱包 · node: ...· 1 周前 ·

爱玩的小熊猫 · #66212 (filebrowser: ...· 1 周前 ·

正直的镜子 · node: ...· 1 周前 ·

千杯不醉的瀑布 · "node: ...· 1 周前 ·

性感的椅子 · 常见问题解答 − 客户服务 − 美国航空· 1 月前 ·

贪玩的野马 · 【涨球技】赫亚坐莲是怎样练成的· 5 月前 ·

乐观的冲锋衣 · 三星 Galaxy Z Fold5 | ...· 5 月前 ·

千杯不醉的牙膏 · 页面重载开启· 6 月前 ·

豪爽的小狗 · 数据之events（json） – ...· 7 月前 ·

Hello,
it is currently impossible to build nagios-plugins against an OpenSSL installation without SSLv3 support because plugins/sslutils.c uses SSLv3 functions without checking whether they even exist. Such a check is present for the SSLv2 support, but as SSLv3 is also ancient and has known weaknesses, it is getting more likely to encounter OpenSSL installations that have SSLv3 support disabled.
The FreeBSD port of nagios-plugins is currently using the following patch to allow the build to succeed; I think it can be used verbatim here, too:

Code: Select all

--- plugins/sslutils.c.orig	2016-01-14 20:02:06.419867000 +0100
+++ plugins/sslutils.c	2016-01-14 20:01:36.091492000 +0100
@@ -70,8 +70,13 @@
 #endif
 		break;
 	case 3: /* SSLv3 protocol */
+#if defined(OPENSSL_NO_SSL3)
+		printf(("%s\n", _("CRITICAL - SSL protocol version 3 is not supported by your SSL library.")));
+		return STATE_CRITICAL;
+#else
 		method = SSLv3_client_method();
 		ssl_options = SSL_OP_NO_SSLv2 | SSL_OP_NO_TLSv1;
+#endif
 		break;
 	default: /* Unsupported */
 		printf("%s\n", _("CRITICAL - Unsupported SSL protocol version."));
			Thanks for the patch!  Mind if I move this to the GitHub?  https://github.com/nagios-plugins/nagios-plugins/

It will get more traction there.  Otherwise if you have an account already a pull request will improve the response time.
							Display: 
								Sort by: 
				Direction: 
																				  Community Support Forums For Nagios Commercial Products
																 ↳   Nagios XI
																 ↳   Nagios Log Server
																 ↳   Nagios Network Analyzer
																 ↳   Nagios Fusion
																 ↳   Development on Github
																 ↳   Nagios Core
																 ↳   Nagios Plugins
																 ↳   NCPA
																  Community Support Forums For Nagios Open Source Projects
																 ↳   Open Source Nagios Projects

推荐文章

英俊的野马 · Openssl not found in unity sdk for facebook - Questions & Answers - Unity Discussions

1 周前

不敢表白的钱包 · node: --openssl-legacy-provider is not allowed in NODE_OPTIONS Waiting for the debugger to disconnec

1 周前

爱玩的小熊猫 · #66212 (filebrowser: --openssl-legacy-provider is not allowed in NODE_OPTIONS) – MacPorts

1 周前

正直的镜子 · node: --openssl-legacy-provider is not allowed in NODE_OPTIONS 怎么解决_wslyfzz-GitCode 开源社区

1 周前

千杯不醉的瀑布 · "node: --openssl-legacy-provider禁用node_options问题深入探讨"_慕课手记

1 周前

性感的椅子 · 常见问题解答 − 客户服务 − 美国航空

1 月前

贪玩的野马 · 【涨球技】赫亚坐莲是怎样练成的

5 月前

乐观的冲锋衣 · 三星 Galaxy Z Fold5 | 三星电子中国

5 月前

千杯不醉的牙膏 · 页面重载开启

6 月前

豪爽的小狗 · 数据之events（json） – FullCalendar中文文档 - Keenwon's Blog

7 月前