by default, in the configure script for nrpe detects the openssl libs, then it 
will build nrpe with ssl enabled by default unless you explicitly tell it not 
to, IIRC.
 
Sent from my hospital bed in Niagara Falls,
 
    ____ _       _______
   / __ \ |     / / ___/ Robert Wolfe <robert.wo...@robertwolfe.org>
  / /_/ / | /| / /\__ \  Robert Wolfe Software
 / _, _/| |/ |/ /___/ /  Web : http://www.robertwolfe.org 
<http://www.robertwolfe.org/> 
/_/ |_| |__/|__//____/   Debian Blog : http://debian.robertwolfe.org 
<http://debian.robertwolfe.org/> 

________________________________

From: Will Chase [mailto:w...@demdex.com]
Sent: Mon 7/26/2010 6:06 PM
To: nagios-users@lists.sourceforge.net
Subject: [Nagios-users] SSL Confirmation



  New user to the group here... Sorry if this is a repeated question, I
haven't been able to find it in searches.

I have a few machines running CentOS 5.5. I have a working Nagios
configuration installed, monitoring some basic and non-basic checks,
most over NRPE.

I was asked me to make sure that the data is encrypted over SSL, and
after doing some research, it looks to me like NRPE operates over SSL by
default if both host & client have compatible version of openssl.

Can anyone verify that this is true? I have run "check_nrpe" manually
and verified that the handshake occurs without the "-n" flag. If I add
the flag, the handshake fails... Which leads me to believe it's already
running over SSL.

If this is true, where is the encryption info stored by default (keys, etc)?

Thanks,
W

------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share
of $1 Million in cash or HP Products. Visit us here for more details:
http://ad.doubleclick.net/clk;226879339;13503038;l?
http://clk.atdmt.com/CRS/go/247765532/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue.
::: Messages without supporting info will risk being sent to /dev/null


<<winmail.dat>>

------------------------------------------------------------------------------
The Palm PDK Hot Apps Program offers developers who use the
Plug-In Development Kit to bring their C/C++ apps to Palm for a share 
of $1 Million in cash or HP Products. Visit us here for more details:
http://ad.doubleclick.net/clk;226879339;13503038;l?
http://clk.atdmt.com/CRS/go/247765532/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Reply via email to