evolix/nagios-nrpe-jessie-gbp
21
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

_warn_ssloption.dpatch

Browse source 
#! /bin/sh /usr/share/dpatch/dpatch-run
## 07_warn_ssloption.dpatch by Thijs Kinkhorst <thijs@debian.org>
##
## All lines beginning with `## DP:' are a description of the patch.
## DP: Warn against inadequateness of NRPE's own SSL option.


Gbp-Pq: Name 07_warn_ssloption.dpatch
This commit is contained in:
Debian Nagios Maintainer Group 2024-02-01 12:56:38 +01:00 committed by Ludovic Poujol
parent df777ff68c
commit e222db65fc
Signed by: lpoujol
SSH key fingerprint: SHA256:YZbQWfjHONnvIGkFZMs0xRKtqzqGqwtZU+kCOKhZXPA
1 changed files with 7 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
SECURITY
View file

@ -93,14 +93,17 @@ ENCRYPTION
----------
If you do enable support for command arguments in the NRPE daemon,
make sure that you encrypt communications either by using:
1. Stunnel (see http://www.stunnel.org for more info)
2. Native SSL support
make sure that you encrypt communications either by using, for
example, Stunnel (see http://www.stunnel.org for more info).
Do NOT assume that just because the daemon is behind a firewall
that you are safe! Always encrypt NRPE traffic!
NOTE: the currently shipped native SSL support of NRPE is not an
adequante protection, because it does not verify clients and
server, and uses pregenerated key material. NRPE's SSL option is
advised against. For more information, see Debian bug #547092.
USING ARGUMENTS
---------------