[Pkg-nagios-devel] Bug#1061956: monitoring-plugins-basic: check_http --no-body fails when Transfer-Encoding: chunked

[Cyprien Nicolas]

Package: monitoring-plugins-basic
Version: 2.3.3-5+deb12u1
Severity: normal

Dear Maintainer,

After upgrading a monitoring server to bookworm, almost all http
checks failed.

This issue is related to `check_http` failing to handle the --no-body
or -N argument when a server sends the Transfer-Encoding: chunked
header.

We use this argument for checking only the HTTP status code, as we
don't need the full body of the response.

The issue is already fixed upstream since 2.3.4 [1] and I can't
reproduce the issue with 2.3.5-1 from testing.

To reproduce, using 2.3.3-5+deb12u1:

cyprien $ /usr/lib/nagios/plugins/check_http --ssl --sni -H wiki.debian.org
HTTP OK: HTTP/1.1 200 OK - 24108 octets en 1,476 secondes de temps de réponse |time=1,475541s;;;0,000000;10,000000 size=24108B;;;0;

cyprien $ /usr/lib/nagios/plugins/check_http --ssl --sni -H wiki.debian.org --no-body
HTTP UNKNOWN: Failed to unchunk message body

Would it be possible to get a fix in current stable? In next
point-release maybe?

1. https://github.com/monitoring-plugins/monitoring-plugins/pull/1901

-- System Information:
Debian Release: 12.4
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable'), (400, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-17-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages monitoring-plugins-basic depends on:
ii  iputils-ping               3:20221126-1
ii  libc6                      2.36-9+deb12u3
ii  libssl3                    3.0.11-1~deb12u2
ii  monitoring-plugins-common  2.3.3-5+deb12u1
ii  procps                     2:4.0.2-3
ii  ucf                        3.0043+nmu1

Versions of packages monitoring-plugins-basic recommends:
ii  libcap2-bin  1:2.66-4

Versions of packages monitoring-plugins-basic suggests:
pn  icinga2  <none>

-- no debconf information
-- 
Cyprien