AES encryption for NSCA
Posted: Wed Nov 18, 2015 8:28 am
I'm trying to prepare my environment for migration to NSClient++ 0.4.4 or higher (from 0.4.1.105)
The default encryption method suggested by Michael Medin for NSCA is aes.
In the nsca.cfg on the Nagios server however I only find:
Is aes encryption supported on the Nagios NSCA side? If yes, what number am I supposed to configure in nsca.cfg?
The default encryption method suggested by Michael Medin for NSCA is aes.
Code: Select all
[/settings/NSCA/client/targets/default]
encryption = aesCode: Select all
# DECRYPTION METHOD
# This option determines the method by which the nsca daemon will
# decrypt the packets it receives from the clients. The decryption
# method you choose will be a balance between security and performance,
# as strong encryption methods consume more processor resources.
# You should evaluate your security needs when choosing a decryption
# method.
#
# Note: The decryption method you specify here must match the
# encryption method the nsca clients use (as specified in
# the send_nsca.cfg file)!!
# Values:
#
# 0 = None (Do NOT use this option)
# 1 = Simple XOR (No security, just obfuscation, but very fast)
#
# 2 = DES
# 3 = 3DES (Triple DES)
# 4 = CAST-128
# 5 = CAST-256
# 6 = xTEA
# 7 = 3WAY
# 8 = BLOWFISH
# 9 = TWOFISH
# 10 = LOKI97
# 11 = RC2
# 12 = ARCFOUR
#
# 14 = RIJNDAEL-128
# 15 = RIJNDAEL-192
# 16 = RIJNDAEL-256
#
# 19 = WAKE
# 20 = SERPENT
#
# 22 = ENIGMA (Unix crypt)
# 23 = GOST
# 24 = SAFER64
# 25 = SAFER128
# 26 = SAFER+
#