Ndo 1.4b7 patch : SSL connections
nap
naparuba at gmail.com
Thu Nov 6 14:08:49 CET 2008
Hi List,
I wrote a patch for ndo 1.4b7 (ndomod and ndo2db) : the SSL
connection. The code come from nrpe. I think this can be useful with
distributed Nagios, the communications between the secondary nagios
and ndo2db are in plaintext and we can see the name of the host in it.
The patch just apply the SSL connection to the sock of the connection
between ndomod and ndo2db (just for a tcp connection, i don't think it
is useful for unix socket...).
In the patch you can see the dh.h file from nrpe. In nrpe it's
generated by ./configure but I don't know how to modified it. The
Makefile need the ssl lib too, but I don't know how to modify the
autoconf (I leave a Makefile.new in the patch to show what to modify),
if someone can help me on this ;)
For the moment the patch apply the SSL for all connections, but maybe
we can put the use_ssl argument into ndo2db.conf and ndomod.conf.
I test with a small server and 4000 services and I don't see any
overload of ndo2db or nagios due to the SSL. It can't be null, just
small.
Jean
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ndo14b7_ssl_patch.patch
Type: text/x-patch
Size: 13111 bytes
Desc: not available
URL: <https://www.monitoring-lists.org/archive/developers/attachments/20081106/adf4d36a/attachment.bin>
-------------- next part --------------
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
-------------- next part --------------
_______________________________________________
Nagios-devel mailing list
Nagios-devel at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-devel
More information about the Developers
mailing list