[Nagios-devel] Patch for using ssl-client-certificates with Nagios-1.2
Posted: Tue May 11, 2004 2:56 pm
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_000_01C437AB.1A945300
Content-Type: text/plain
Hi everybody,
I've the need to support SSL client certificates for Nagios user authentication instead of simply using basic authentication. The problem was that Nagios sees the complete DN of the users certificate - and because this includes e.g. "=" and ",", it doesn't accepts these DNs as usernames in its configuration files. The attached patch simply uses the CN value of the DN. E.g. if the DN of a certificate is: "CN=JDOE, O=SNAKEOIL, C=DE", Nagios will use "JDOE" as username.
Unfortunately I haven't made the diff against the latest CVS revisions but against the release version 1.2.
If you need further help in setting up the client certificate authentication feel free to ask me...
Regards,
Torsten
------_=_NextPart_000_01C437AB.1A945300
Content-Type: application/octet-stream;
name="nagios-ssl-certificates.patch.gz"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="nagios-ssl-certificates.patch.gz"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------_=_NextPart_000_01C437AB.1A945300--
This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]
this format, some or all of this message may not be legible.
------_=_NextPart_000_01C437AB.1A945300
Content-Type: text/plain
Hi everybody,
I've the need to support SSL client certificates for Nagios user authentication instead of simply using basic authentication. The problem was that Nagios sees the complete DN of the users certificate - and because this includes e.g. "=" and ",", it doesn't accepts these DNs as usernames in its configuration files. The attached patch simply uses the CN value of the DN. E.g. if the DN of a certificate is: "CN=JDOE, O=SNAKEOIL, C=DE", Nagios will use "JDOE" as username.
Unfortunately I haven't made the diff against the latest CVS revisions but against the release version 1.2.
If you need further help in setting up the client certificate authentication feel free to ask me...
Regards,
Torsten
------_=_NextPart_000_01C437AB.1A945300
Content-Type: application/octet-stream;
name="nagios-ssl-certificates.patch.gz"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="nagios-ssl-certificates.patch.gz"
H4sICAdUoUAAA25hZ2lvcy1zc2wtY2VydGlmaWNhdGVzLnBhdGNoAI1WXW/qOBB9hl8x4r6UQtIk
9JMqqyKa3ttdNkh8vK1kmcQB64YYOU57u1f733fsQBsoaRtClNhnxmcmc8aJeZKAFdJCQkaXXOSW
a3tn0ZKf0UKt7Kgyaq9FzBPO4sp007Ks44YNz3E8yzm3vCtwrvrn533nynZ2B3QcnG92Op1PFtBu
zi3nwnI9cJw+np77zs3dHVi9y+4ldPB6BXd3TWC/FJMZrESullIUGyiP09cBkvJc3TbhFcozBdWj
yBnRHFimeEQVF9lts/MBNko5QknEpMIg0ILlH7nXRHKyok+MLBjLiGQ0vv0QbWi/N9HBX99g2J0b
p+u6JvqGJs6zRFh/6Dsh+b8sJomQJBJZwpeFNAERDZFrc+8/DEbTwDBunJ3CUtKFDktmdM0gkWIN
mApg2ROXIltjpLZtw+lZ02oott6QjZL+kimcP2lNgr/Hs4DMp8Gk1cakNXgCJzUpAt8Hs3IbfiPy
C87+A5bmrAY9nY7IcPQYhDMyJfchGYZbI4yKJyeveD+cj0bt3zhaSdUuXL/Vut2fqdQBi3eZimul
g/9C8TT/QD5vkGMSepstZeS6eIJz3r/w+m5vr/7dT2S076qUkgter39x3fd6R6WE1YRSMjWli0nx
NSOVcsywRkkerVhcpFhVqVgSKVRZRM7IVNDnWvJnkznmsIPIRqOmNioleegQn5l8oilJWbZUK//S
0TBN3r0y7N1rZ0u/USVI1gzlEPuj8XcyGc8Gs8dxSMJxuC38ep5f4NioJ+VdX2tSnlbollWjUb8a
zu4CxcLVhW5KHgv4JFcSzxOebQpFFkWSMNlt1XFrtX2/imy3jWpK2ZRDPnpT4ueBQ79UzVGkVk63
9U+2g+xktUWVyjIztTnb5fQtLqoEr7pB4s4nTraJ33n54opvee3oNO/WP5rWUlIEKz36iY1zvaZZ
/D6npol8MaU1yG1Kfzkac7yt5HS9SZlVtm8tajtKljbPjuq+DnzYaupw26bjWD0HHLfvXPR7F19u
Oh85rezknoffBEfbz01PawWvnmekYn6dbzCfDr4HMH6AssHDMJjMHh8eh4NZMIWH8QQG89kPnNAj
KGttMlvxHMRGSwuQkJIizeF5hT2ASVBC9yXALQPKkoG9jQl3Ru1Cbwqwr1IQEhY059HheMKoKiQD
kcCLKIz5M1uggycmbXzSA1OmFM+WuJsiNWwWBdNEHDjR22vMElqkqg3PPE0hoppfaHK8Zas9lEsf
4dXF0HjKgGYvIEyIpf83Z9p8z5/Z1IehZqzvjucCNlI88ZjF5jUsXgxUr29DYC9t83j/6uOIPUaq
LVvD0P/zfhx0YexPw8Ffwfhx1IWhfx+0ujtahqsm1tLIFtDS1ERbfoqIw7Axs81OnfAdPam1/g3u
g4fBfDQD/Smhnw/ehOR0kW6The+BZ5jI3QuprK9WFIOjmfZAo4jlOWzokmnmuLMU6pAclEVI01Q8
I5SJjVlEf1kAbf4Pn4PKQH8LAAA=
------_=_NextPart_000_01C437AB.1A945300--
This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]