diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 16:21:12 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 16:21:12 +0000 |
commit | 393853db31e146165afcabf94d20d653f32001b1 (patch) | |
tree | e0b0ae14e8dcafadef5f0b6e4284f8e6e1600677 /debian/patches/07_warn_ssloption.patch | |
parent | Adding upstream version 4.1.0. (diff) | |
download | nagios-nrpe-393853db31e146165afcabf94d20d653f32001b1.tar.xz nagios-nrpe-393853db31e146165afcabf94d20d653f32001b1.zip |
Adding debian version 4.1.0-1.debian/4.1.0-1debian
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r-- | debian/patches/07_warn_ssloption.patch | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/debian/patches/07_warn_ssloption.patch b/debian/patches/07_warn_ssloption.patch new file mode 100644 index 0000000..a6f9686 --- /dev/null +++ b/debian/patches/07_warn_ssloption.patch @@ -0,0 +1,28 @@ +Description: Warn against inadequateness of NRPE's own SSL option. +Author: Thijs Kinkhorst <thijs@debian.org> +Forwarded: not-needed + +--- a/SECURITY.md ++++ b/SECURITY.md +@@ -91,14 +91,17 @@ Encryption + ---------- + + If you do enable support for command arguments in the NRPE daemon, +-make sure that you encrypt communications either by using: +- +- 1. Stunnel (see http://www.stunnel.org for more info) +- 2. Native SSL support (See the [SSL Readme](README.SSL.md) file for more info) ++make sure that you encrypt communications by using, for example, ++Stunnel (see http://www.stunnel.org for more info). + + Do **NOT** assume that just because the daemon is behind a firewall + that you are safe! ***Always encrypt NRPE traffic!*** + ++NOTE: the currently shipped native SSL support of NRPE is not an ++adequante protection, because it does not verify clients and ++server, and uses pregenerated key material. NRPE's SSL option is ++advised against. For more information, see Debian bug #547092. ++ + + Using Arguments + --------------- |