[Nagiosplug-help] sslutils.c bug (affects check_http)

[Donald Gordon]

Hi

One of our SSL servers is reported as down by check_http when it's really up - I get the "HTTP CRITICAL - Error on receive" message.

Sticking some debug code in sslutils.c reveals that SSL_read() is returning with an error code, which SSL_get_error decodes as an SSL_ERROR_WANT_READ.  The OpenSSL docs say that when SSL_ERROR_WANT_READ or SSL_ERROR_WANT_WRITE is returned, the SSL operation should be retried once there is data available to read or write.

I'm running Debian Lenny's packaged nagios plugins (1.4.12) but a cursory glance at git shows that sslutils.c still doesn't handle SSL_ERROR_WANT_(READ|WRITE).

donald



Donald Gordon
Operations Developer, Xero

donald.gordon at xero.com | Telephone +64 4 819 4872 | Fax +64 4 819 4801

Level 1, Old Bank, 98 Customhouse Quay, PO Box 24 537,
  6142, New Zealand

http://www.xero.com/