Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Hi List,
I wrote a patch for ndo 1.4b7 (ndomod and ndo2db) : the SSL
connection. The code come from nrpe. I think this can be useful with
distributed Nagios, the communications between the secondary nagios
and ndo2db are in plaintext and we can see the name of the host in it.
The patch just apply the SSL connection to the sock of the connection
between ndomod and ndo2db (just for a tcp connection, i don't think it
is useful for unix socket...).
In the patch you can see the dh.h file from nrpe. In nrpe it's
generated by ./configure but I don't know how to modified it. The
Makefile need the ssl lib too, but I don't know how to modify the
autoconf (I leave a Makefile.new in the patch to show what to modify),
if someone can help me on this
For the moment the patch apply the SSL for all connections, but maybe
we can put the use_ssl argument into ndo2db.conf and ndomod.conf.
I test with a small server and 4000 services and I don't see any
overload of ndo2db or nagios due to the SSL. It can't be null, just
small.
Jean
------=_Part_20831_16372504.1225976929326
Content-Type: text/x-patch; name=ndo14b7_ssl_patch.patch
Content-Transfer-Encoding: base64
X-Attachment-Id: f_fn7esq4f0
Content-Disposition: attachment; filename=ndo14b7_ssl_patch.patch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...[email truncated]...
This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]