You need to make sure your server returns tls1.0 first. Then, check if your plugin supports it. Supposedly, your server is not the problem. The assumption is that your plugin doesn't support it. You can run verbose seeing how it goes.

-B
On 10/19/2014 9:43 PM, Andrew Nemeth wrote:
Hello,

We recently disabled SSLv3 and SSLv2 due to the poodle and other
vulnerabilities however the plugins (both smtps and pop3s plugins) are now
failing with the following:

root@estonia:/usr/local/nagios/etc/check_multi#
/usr/local/nagios/libexec/check_spop -a 184.170.132.66
CRITICAL - Cannot make SSL connection
12515:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
handshake failure:s23_clnt.c:596:

Could you advise how we can check against TLS instead?

Thank you,

Andrew


Reply via email to