SSL Confirmation

[Robert Wolfe]

by default, in the configure script for nrpe detects the openssl libs, then it will build nrpe with ssl enabled by default unless you explicitly tell it not to, IIRC.
 
Sent from my hospital bed in Niagara Falls,
 
    ____ _       _______
   / __ \ |     / / ___/ Robert Wolfe <robert.wolfe at robertwolfe.org>
  / /_/ / | /| / /\__ \  Robert Wolfe Software
 / _, _/| |/ |/ /___/ /  Web : http://www.robertwolfe.org <http://www.robertwolfe.org/> 
/_/ |_| |__/|__//____/   Debian Blog : http://debian.robertwolfe.org <http://debian.robertwolfe.org/> 

________________________________

From: Will Chase [mailto:will at demdex.com]
Sent: Mon 7/26/2010 6:06 PM
To: nagios-users at lists.sourceforge.net
Subject: [Nagios-users] SSL Confirmation



  New user to the group here... Sorry if this is a repeated question, I
haven't been able to find it in searches.

I have a few machines running CentOS 5.5. I have a working Nagios
configuration installed, monitoring some basic and non-basic checks,
most over NRPE.

I was asked me to make sure that the data is encrypted over SSL, and
after doing some research, it looks to me like NRPE operates over SSL by
default if both host & client have compatible version of openssl.

Can anyone verify that this is true? I have run "check_nrpe" manually
and verified that the handshake occurs without the "-n" flag. If I add
the flag, the handshake fails... Which leads me to believe it's already
running over SSL.

If this is true, where is the encryption info stored by default (keys, etc)?

Thanks,
W

------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://ad.doubleclick.net/clk;226879339;13503038;l?
http://clk.atdmt.com/CRS/go/247765532/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null


-------------- next part --------------
A non-text attachment was scrubbed...
Name: winmail.dat
Type: application/ms-tnef
Size: 5216 bytes
Desc: not available
URL: <https://www.monitoring-lists.org/archive/users/attachments/20100726/21c25121/attachment.bin>
-------------- next part --------------
------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share 
of $1 Million in cash or HP Products. Visit us here for more details:
http://ad.doubleclick.net/clk;226879339;13503038;l?
http://clk.atdmt.com/CRS/go/247765532/direct/01/
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null