check_pop plugin poodle vulnerability

B crazyworld at outlook.com
Mon Oct 20 07:05:26 CEST 2014


You need to make sure your server returns tls1.0 first. Then, check if 
your plugin supports it. Supposedly, your server is not the problem. The 
assumption is that your plugin doesn't support it. You can run verbose 
seeing how it goes.

-B
On 10/19/2014 9:43 PM, Andrew Nemeth wrote:
> Hello,
>
> We recently disabled SSLv3 and SSLv2 due to the poodle and other
> vulnerabilities however the plugins (both smtps and pop3s plugins) are now
> failing with the following:
>
> root at estonia:/usr/local/nagios/etc/check_multi#
> /usr/local/nagios/libexec/check_spop -a 184.170.132.66
> CRITICAL - Cannot make SSL connection
> 12515:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert
> handshake failure:s23_clnt.c:596:
>
> Could you advise how we can check against TLS instead?
>
> Thank you,
>
> Andrew
>




More information about the Help mailing list