[Pkg-nagios-devel] Bug#547092: Bug#547092: nagios-nrpe-server: Insecure 'SSL' option, key identical for all debian systems

[Florian Ernst]

Hello all,

On Mon, Feb 20, 2012 at 06:29:54AM +0100, Alexander Wirt wrote:
> Christoph Anton Mitterer schrieb am Monday, den 20. February 2012:
> > The upstream bug is now more than 2 years old... and upstream is
> > well known for doing nothing (which is the reason for
> > icinga/shinken)...
> > 
> > Can't we just integrate this in Debian's nrpe?
> this breaks all existing nrpes (...)

JFTR, Russell Coker worked around this breakage as detailed in
http://etbe.coker.com.au/2009/12/14/nagios-and-ssl-in-debian/

This might not be suitable for a distribution like Debian, but
individual admins might want to follow suit. Or migrate to NRPE-less
setups with checks conducted via SSH with pubkeys and possibly using
check_multi and/or check_mk ...

Cheers,
Flo