Page 1 of 1
Nagios nrpe & check_nrpe fix available nrpe-2-16-RC2?
Posted: Fri Dec 18, 2015 2:50 am
by rajasegar
I was browsing and stumbled across this fix for the nrpe weak sss/ciphers issue.
https://github.com/NagiosEnterprises/nr ... e-2-16-RC2
Can anyone from Nagios verify this?
Thanks
Re: Nagios nrpe & check_nrpe fix available nrpe-2-16-RC2?
Posted: Fri Dec 18, 2015 10:50 am
by tmcdonald
Insofar as that is our official GitHub account, yes I can verify that we wrote that fix. However as it is still a release candidate and not an official release, we have not yet officially tested the code. I tend to believe it's been fixed as I trust John's work, but I can't set for sure at the moment. It will be tested eventually, but it will need to make it through the paces first.
Re: Nagios nrpe & check_nrpe fix available nrpe-2-16-RC2?
Posted: Sun Dec 20, 2015 7:50 pm
by rajasegar
tmcdonald wrote:Insofar as that is our official GitHub account, yes I can verify that we wrote that fix. However as it is still a release candidate and not an official release, we have not yet officially tested the code. I tend to believe it's been fixed as I trust John's work, but I can't set for sure at the moment. It will be tested eventually, but it will need to make it through the paces first.
Hope Nagios can fast track the unit test and verify all the vulnerabilities(medium strength and weak ciphers support) has been addressed so that we can do regression testing.
This is a major audit issue in enterprise environments.
Thanks
Re: Nagios nrpe & check_nrpe fix available nrpe-2-16-RC2?
Posted: Mon Dec 21, 2015 2:44 pm
by tmcdonald
Being that we're heading into the holiday season, our weeks are going to be somewhat short for a while so I can't guarantee it will be done before 2016. We're also working on getting some testing done on our commercial products as we prepare for new releases, so that is taking some time. It will be done, but I can't promise a fast-track.
Re: Nagios nrpe & check_nrpe fix available nrpe-2-16-RC2?
Posted: Mon Dec 21, 2015 7:00 pm
by rajasegar
tmcdonald wrote:Being that we're heading into the holiday season, our weeks are going to be somewhat short for a while so I can't guarantee it will be done before 2016. We're also working on getting some testing done on our commercial products as we prepare for new releases, so that is taking some time. It will be done, but I can't promise a fast-track.
I understand, asap will be fine. This is one of the major points against nagios from your competitors.
So it is in your best interest also.
Thanks
Re: Nagios nrpe & check_nrpe fix available nrpe-2-16-RC2?
Posted: Tue Dec 22, 2015 10:59 am
by hsmith
I'll leave this open for now. I know we have a lot of people waiting for the new NRPE release, and I'm glad it's being updated with some features that have been requested for awhile. Thanks for your feedback!