[Nagiosplug-devel] [ nagiosplug-Patches-1055120 ] check_tcp.c : Fix bad SSL initialization problems

[SourceForge.net]

Patches item #1055120, was opened at 2004-10-27 00:13
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=397599&aid=1055120&group_id=29880

Category: Bugfix
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Phil Dibowitz (jaymzh)
Assigned to: Nobody/Anonymous (nobody)
Summary: check_tcp.c : Fix bad SSL initialization problems

Initial Comment:
This is a patch for Bug ID 1030062. I've added the
patch the Bug Report as well. Paraphrase of the bug report:

There are two problems with the SSL Init Code:
1. In check_tcp.c, the code checks for a return value
of -1 from SSL_connect and only then will it throw an
error. However, the only non-error response is 1, and
thus all other values should throw an error. In my
case, this problem caused an bad initialization to go
uncaught and more random things to happen later.

2. The code supports at most SSLv2, which is obsolete.
The patch will use SSLv3, and if that doesn't work then
fail to SSLv2.

- Phil

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=397599&aid=1055120&group_id=29880