Nagios Support Forum

This is a multi-part message in MIME format.

------=_NextPart_000_00E6_01C638BF.17C56800
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit


> > added back in with just a few tweaks. If you can't get a patch
> > together, I can take a look at doing this next week.
>
> I'll take a stab at it. The attached patch should re-add the
> allowed_hosts functionality in a complementary fashion to the

You were fast, thank you. So i can watch TV tonight.

Ethan, you applied my nrpe-2.3-allow_weak_random_seed patch to the 2.4
branch. Would you be so kind and add another line, which came to my mind
later? The results of the rand() calls in the last fallback might be
predictable, so seeding with the current time is necessary.
It's just a "srand(time(NULL));" after the syslog call. I attached a patch
file for the 1.42

Greetings from munich,
Gerhard

------=_NextPart_000_00E6_01C638BF.17C56800
Content-Type: application/octet-stream;
name="nrpe-1.42-srand.patch"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="nrpe-1.42-srand.patch"

diff -Naur nrpe-1.42/nrpe.c nrpe-1.42-srand/nrpe.c=0A=
--- nrpe-1.42/nrpe.c 2006-02-23 21:04:45.040154300 +0100=0A=
+++ nrpe-1.42-srand/nrpe.c 2006-02-23 21:06:45.631588900 +0100=0A=
@@ -196,6 +196,7 @@=0A=
=20
if(RAND_status()=3D=3D0){
syslog(LOG_ERR,"Warning: SSL/TLS uses a weak random seed which is =
highly discouraged");
+ srand(time(NULL));
for(i=3D0;i<500 && RAND_status()=3D=3D0;i++){
for(c=3D0;c<sizeof(seedfile);c+=3Dsizeof(int)){
*((int *)(seedfile+c))=3Drand();

------=_NextPart_000_00E6_01C638BF.17C56800--






This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]