monitoring-plugins/plugins
Holger Weiss 5a5d3d7013 Disable stateless SSL session resumption
Some versions of OpenSSL fail to negotiate the SSL connection with at
least some versions of Tomcat if stateless SSL session resumption
support (see RFC4507) is enabled:

| CRITICAL - Cannot make SSL connection
| 140099330348712:error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message:s3_pkt.c:1195:SSL alert number 10

The problem is reproducible with OpenSSL 1.0.0h, but not with OpenSSL
0.9.8o-4squeeze12 (as shipped with Debian 6.0.4).  We work around it by
disabling the RFC4507 functionality when using OpenSSL versions which
support it.

Thanks to Dag Bakke for reporting the issue and for giving me access to
a server I could use to reproduce the problem.
2012-05-07 12:11:48 +02:00
..
t check_by_ssh: added -F config file to specify alternative ssh config 2012-04-09 22:16:39 +02:00
tests check_http: check for and print the certificate cn 2011-02-04 00:54:52 -05:00
check_apt.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_by_ssh.c check_by_ssh: added -F config file to specify alternative ssh config 2012-04-09 22:16:39 +02:00
check_cluster.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_dig.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_disk.c Fix check_disk free space calculation if blocksizes differ within a disk group (Bekar - #2973603) 2010-11-15 23:59:35 +01:00
check_dns.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_dummy.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_fping.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_game.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_hpjd.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_http.c Clarify that check_http won't verify certificates 2012-02-24 13:24:56 +01:00
check_ide_smart.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_ldap.c Fix: check_ldap now correctly handles the long option --hostname for -H 2011-08-13 03:44:27 +02:00
check_load.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_mrtg.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_mrtgtraf.c Standardize the extra-opts notes 2010-04-21 23:29:18 -04:00
check_mysql.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_mysql_query.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_nagios.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_nt.c check_nt: make UPTIME accept warning/critical levels 2010-10-15 01:52:29 -04:00
check_ntp.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_ntp_peer.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_ntp_time.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_nwstat.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_overcr.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_pgsql.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_ping.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_procs.c Fix for regex input of '|', being output causing problems with Nagios' parsing of 2011-01-21 13:14:33 +00:00
check_radius.c Make GCC happy 2011-09-06 23:20:21 -04:00
check_real.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_smtp.c Fix check_smtp and check_tcp where duplicate messages were displayed for certificate errors (Opsview team) 2011-07-15 21:19:15 +01:00
check_snmp.c Cosmetic change 2012-02-24 12:31:20 +01:00
check_ssh.c Add perfdata to check_ssh (#3244097 - Marco Beck) 2011-03-26 15:44:38 -04:00
check_swap.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_tcp.c Fix check_smtp and check_tcp where duplicate messages were displayed for certificate errors (Opsview team) 2011-07-15 21:19:15 +01:00
check_time.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_ups.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
check_users.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
common.h Enable compiling on AIX 6.1 2012-02-10 10:27:24 -06:00
Makefile.am Added state retention APIs. Implemented for check_snmp with --rate option. 2010-06-23 13:30:34 +00:00
negate.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
netutils.c Make socket alarm handler customisable (like c459ca07) 2009-03-24 21:40:06 -04:00
netutils.h check_http: Add SSL/TLS hostname extension support (SNI) - (#1939022 - Joe Presbrey) 2009-05-20 01:05:35 -04:00
popen.c Removing CVS/SVN tags and replacing with git-based versioning 2008-11-23 05:38:47 +00:00
popen.h Removing CVS/SVN tags and replacing with git-based versioning 2008-11-23 05:38:47 +00:00
runcmd.c Removing CVS/SVN tags and replacing with git-based versioning 2008-11-23 05:38:47 +00:00
runcmd.h Removing CVS/SVN tags and replacing with git-based versioning 2008-11-23 05:38:47 +00:00
sslutils.c Disable stateless SSL session resumption 2012-05-07 12:11:48 +02:00
urlize.c Add newline after "Usage:" in --help 2010-04-22 08:57:14 -04:00
utils.c Make alarm handler customisable 2009-03-20 02:19:42 -04:00
utils.h Update extra-opts help text based on ML agreement 2010-04-28 06:03:57 -04:00