monitoring-plugins/plugins/check_tcp.c, branch v3.0.0-rc3

added CHECK_EOF to work around warnings about EOF and -1 being the same (#2254)

2026-04-08T16:26:03Z

Co-authored-by: Andreas Baumann

Rename USE_OPENSSL to MOPL_USE_OPENSSL (#2253)

2026-04-08T16:06:29Z

net-snmp uses the same pre processor name "USE_OPENSSL" as we do. To avoid the conflict, this commit renames it on our side to "MOPL_USE_OPENSSL". "MOPL" (better "MoPl"?) stands for Monitoring Plugins.

Make IPv6 unconditional (#2219)

2026-02-06T11:59:58Z

This commits removes the detection of IPv6 availability. The IPv6 code in the plugins is used unconditionally now.

OpenBSD: pledge(2) some network-facing checks (#2225)

2026-02-06T11:58:38Z

OpenBSD's pledge(2) system call allows the current process to self-restrict itself, being reduced to promised pledges. For example, unless a process says it wants to write to files, it is not allowed to do so any longer. This change starts by calling pledge(2) in some network-facing checks, removing the more dangerous privileges, such as executing other files. My initial motivation came from check_icmp, being installed as a setuid binary and (temporarily) running with root privileges. There, the pledge(2) calls result in check_icmp to only being allowed to interact with the network and to setuid(2) to the calling user later on. Afterwards, I went through my most commonly used monitoring plugins directly interacting with the network. Thus, I continued with pledge(2)-ing check_curl - having a huge codebase and all -, check_ntp_time, check_smtp, check_ssh, and check_tcp. For most of those, the changes were quite similar: start with network-friendly promises, parse the configuration, give up file access, and proceed with the actual check.

Run clang-format again

2025-09-15T10:59:37Z

check_tcp: Actually account for certificate lifetime checks

2025-03-13T13:48:20Z

check_tcp: add output if answer matches expectations

2025-03-13T11:25:29Z

Fix TLS/non-TLS send/recv logic

2025-03-13T11:24:45Z

check_tcp: patch backwards compatibility in again

2025-03-13T10:37:52Z

check_tcp: small cleanup

2025-03-13T10:37:20Z