[Pkg-nagios-devel] Bug#644627: Bug#644627: nagios-plugins-basic: check_http --ssl doesn't verify the validity of a certificate

[Jan Wagner]

Hi Michael,

On Thursday, 23. February 2012, Michael Renner wrote:
> On Feb 23, 2012, at 13:55 , Jan Wagner wrote:
> > that was not my point. I asked, _where_ do you expect such an
> > information. And while we are at it, maybe you can tell me, _what_ do
> > you expect at this place. Feel free to provide patches and/or just the
> > text.
> 
> Sorry, misinterpreted you there :S
> 
> I'd describe it something like this:
> 
> ---
> 
>  -S, --ssl
>    Connect via SSL. Port defaults to 443. See below for details.
> 
> [..]
> 
>  This plugin can also check whether an SSL enabled web server is able to
>  serve content (optionally within a specified time) or whether the X509
>  certificate is still valid for the specified number of days.
> 
>  Please note that this plugin does not check if the presented server
>  certificate matches the hostname of the server or if the certificate
>  has a valid chain of trust to one of the locally installed CAs."

this will be included in the next debian package and also in the next upstream 
release. Anyways we will accept patche(s) implementing checking if the 
certificate matches the hostname and maybe other usefull extensions (as 
always).

With kind regards, Jan.
-- 
Never write mail to <waja at spamfalle.info>, you have been warned!
-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GIT d-- s+: a C+++ UL++++ P+ L+++ E--- W+++ N+++ o++ K++ w--- O M V- PS PE Y++
PGP++ t-- 5 X R tv- b+ DI D+ G++ e++ h---- r+++ y++++ 
------END GEEK CODE BLOCK------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-nagios-devel/attachments/20120224/b2ff532a/attachment.pgp>