summaryrefslogtreecommitdiffstats
path: root/plugins/check_smtp.c
AgeCommit message (Collapse)AuthorFilesLines
11 daysMake IPv6 unconditional (#2219)coverity/masterLorenz Kästle1-4/+0
This commits removes the detection of IPv6 availability. The IPv6 code in the plugins is used unconditionally now.
11 daysOpenBSD: pledge(2) some network-facing checks (#2225)Alvar1-0/+12
OpenBSD's pledge(2) system call allows the current process to self-restrict itself, being reduced to promised pledges. For example, unless a process says it wants to write to files, it is not allowed to do so any longer. This change starts by calling pledge(2) in some network-facing checks, removing the more dangerous privileges, such as executing other files. My initial motivation came from check_icmp, being installed as a setuid binary and (temporarily) running with root privileges. There, the pledge(2) calls result in check_icmp to only being allowed to interact with the network and to setuid(2) to the calling user later on. Afterwards, I went through my most commonly used monitoring plugins directly interacting with the network. Thus, I continued with pledge(2)-ing check_curl - having a huge codebase and all -, check_ntp_time, check_smtp, check_ssh, and check_tcp. For most of those, the changes were quite similar: start with network-friendly promises, parse the configuration, give up file access, and proceed with the actual check.
2025-12-11plugins/check_smtp: Remove unnecessary glibc-only includeAlvar Penning1-1/+0
This library is glibc-only and not necessary at this point. The getopt_long function is provided by "getopt.h", included via "common.h". Similar to #2159.
2025-11-09check_smtp: certificate check is no longer opt-inLorenz Kästle1-38/+50
This is a breaking change. Testing whether a TLS certificate is still valid (expiration wise) is now the default in check_smtp. The reasoning is, that in most scenarios an expired certificate will effectively mean that the service is not working anymore due to the refusal of other software to talk to it. There is a new cli parameter though to explicitly ignore that.
2025-11-09check_smtp: implement output format cli parameterLorenz Kästle1-1/+21
2025-11-08check_smtp: modern output + some tls cert helper functionsLorenz Kästle1-284/+392
2025-09-15Run clang-format againLorenz Kästle1-41/+78
2025-03-10Allow setting of port independent of argument position againLorenz Kästle1-1/+6
2025-03-10check_smtp: fix positional host logicLorenz Kästle1-0/+2
2025-03-10check_smtp: small improvementsLorenz Kästle1-2/+2
2025-03-10check_smtp: small style fixesLorenz Kästle1-5/+8
2025-03-10check_smtp: Remove unused enumLorenz Kästle1-5/+0
2025-03-10Refactor check_smtpLorenz Kästle1-269/+249
2025-03-09check_smtp: clang-formatLorenz Kästle1-440/+410
2024-11-08check_smtp: delare previously missed file local variables staticLorenz Kästle1-2/+2
2024-11-08check_smtp: delare file local variables staticLorenz Kästle1-48/+46
2024-10-31check_smtp: update copyrightLorenz Kästle1-2/+2
2023-10-19check_smtp: Restore behaviour pre ead5526efa4f713e8001baed409067b0474cb72d ↵RincewindsHat1-1/+10
regarding -D and TLS
2023-10-19check_smtp: little fix for C99 booleans missed earlierRincewindsHat1-1/+1
2023-10-18check_smtp: Use C99 booleansRincewindsHat1-25/+25
2023-08-29check_smtp: Let port option always take precedenceFranz Schwartau1-1/+6
Otherwise -s/--ssl would overwrite a port given with -p if it comes after it, e. g. check_smtp -H mailhost.example.com -p 4465 --ssl Found-By: Lorenz Kästle
2023-08-29check_smtp: add new longoption --tlsFranz Schwartau1-2/+3
This is an alias for -s/--ssl.
2023-08-29check_smtp: remove restriction of --proxy with --sslFranz Schwartau1-11/+7
2023-08-29check_smtp: set default port to smtps (465) for TLSFranz Schwartau1-1/+4
The port can still be set with -p.
2023-08-29Add support for SMTP over TLSFranz Schwartau1-9/+37
This is commonly used on smtps (465) port. PROXY protocol is not implemented with TLS in check_smtp.c, yet. Backported from nagios-plugins: https://github.com/nagios-plugins/nagios-plugins/commit/0a8cf08ebb0740aa55d6c60d3b79fcab282604fb
2023-06-28Merge branch 'master' into compiler_warning_part_2waja1-4/+34
2023-06-12Add support for SNI in check_smtp.Arkadiusz Miśkiewicz1-2/+17
Add support for SSL/TLS hostname extension support (SNI) for check_smtp plugin. Backported from nagios-plugins: https://github.com/nagios-plugins/nagios-plugins/commit/9f1628f4b5525335ce1d6e48e8ac8b07d0757f82
2023-06-12check_smtp: update year in copyright headerFranz Schwartau1-1/+1
2023-06-12check_smtp: add missing -r option in usageFranz Schwartau1-1/+1
2023-06-12check_smtp: Add option to prefix PROXY headerPatrick Uiterwijk1-1/+16
This enables checks of SMTP servers that expect the haproxy PROXY protocol: -o smtpd_upstream_proxy_protocol=haproxy. Backported from nagios-plugins: https://github.com/nagios-plugins/nagios-plugins/commit/3246efe923b5482c5024c40e593ce942e628a3cb
2023-04-18Fixes for -Wimplicit-fallthroughRincewindsHat1-0/+1
2023-04-14Fix a lot of typos reported by codespellJan Wagner1-1/+1
2021-10-28check_smtp: add -L flag to support LMTP (LHLO instead of HELO/EHLO).Geert Hendrickx1-4/+14
2019-01-18Simply initializes n before it is usedIustin Pop1-0/+1
When SSL is enabled, n is assigned the size of the server's second EHLO response (I think in bytes), which will usually be significantly higher than the command passed. As such, no commands are executed and no responses are checked, which - silently - defeats the desired checks and results in a success value.
2016-12-01Spelling fixes suggested by lintianJan Wagner1-1/+1
2016-11-19Merge pull request #1382 from riskersen/smtp_tls_expecOliver Skibbe1-15/+22
check_smtp: extended support for expect option
2016-11-18Merge remote-tracking branch 'monitoring-plugins/pr/1443'Holger Weiss1-3/+5
* monitoring-plugins/pr/1443: add openssl 1.1 support
2016-11-17check_radius: Replace functions removed in radcliHolger Weiss1-4/+0
The radcli library no longer offers the rc_get_ipaddr(), rc_good_ipaddr(), and rc_own_ipaddress() functions.
2016-11-13add openssl 1.1 supportvagrant1-3/+5
changes: - CRYPTO_lock detection replaced in configure.ac. We don't use that function anywhere, so just replace it with the suggested one from https://wiki.openssl.org/index.php/Library_Initialization#Autoconf - OPENSSL_NO_SSL2 is no longer defined while ssl2 is not included. Set it ourself using the suggested openssl 1.1 version check from https://wiki.openssl.org/index.php/1.1_API_Changes#Backward_compatibility - openssl 1.1 sends a sigpipe if the connection is still open when calling SSL_shutdown(), so move the close before the shutdown. Signed-off-by: Sven Nierlein <sven@nierlein.de>
2015-10-08check_smtp: extended support for expect optionOliver Skibbe1-15/+22
expect option (-e) supported only first response, so checking for any other response like 250-xxx would never match. This fix stores return of relevant buffer closes #1381
2015-10-08check_smtp.c: modified SSL check for use with -eOliver Skibbe1-1/+1
- currently STARTTLS check does not work with -e if there's text like '220 hostname ESMTP*'. This is caused by SMTP answer from host. Postfix answer: 220 2.0.0 Ready to start TLS, Exchange 2010: 220 2.0.0 SMTP server ready. This fix checks against 220 closes #1093
2015-10-06check_smtp: Let "-D" option imply "-S"Holger Weiss1-5/+4
2015-10-06check_smtp: QUIT SMTP connection when "-D" is usedHolger Weiss1-0/+2
Don't forget to issue an SMTP QUIT command when the -D/--certificate option is specified. This avoids undesired MTA log messages.
2015-10-04use unknown exit code for help/version in pluginsSven Nierlein1-2/+2
Signed-off-by: Sven Nierlein <sven@nierlein.de>
2014-01-21Merge branch 'rename'Thomas Guyot-Sionnest1-3/+3
2014-01-21plugins/*.c: Alterations for timeout messages.Spenser Reinhardt1-1/+1
.c file changes for misleading timeout messages in help functions. Solution to pull request #1209 tracker by awiddersheim. Files: plugins/check_apt.c, plugins/check_by_ssh.c, plugins/check_dbi.c, plugins/check_dig.c, plugins/check_disk.c, plugins/check_dns.c, plugins/check_game.c, plugins/check_http.c, plugins/check_ldap.c, plugins/check_ntp.c, plugins/check_ntp_peer.c, plugins/check_ntp_time.c, plugins/check_nwstat.c, plugins/check_overcr.c, plugins/check_pgsql.c, plugins/check_ping.c, plugins/check_procs.c, plugins/check_radius.c, plugins/check_real.c, plugins/check_smtp.c, plugins/check_snmp.c, plugins/check_ssh.c, plugins/check_tcp.c, plugins/check_time.c, plugins/check_ups.c, plugins/negate.c
2014-01-20Capitalize "Monitoring" when it's the first wordHolger Weiss1-1/+1
2014-01-19Project rename initial commit.Monitoring Plugins Development Team1-3/+3
This is an initial take at renaming the project to Monitoring Plugins. It's not expected to be fully complete, and it is expected to break things (The perl module for instance). More testing will be required before this goes mainline.
2013-08-06Fixed SF.net bug 2555775, threshold can be double for check_smtpJan Wagner1-14/+12
Thanks to Roman Fiedler for reporting the issue and providing a fix
2012-08-10fixing bug in certificate experiation patch checking for bad warning ↵William Leibzon1-1/+1
threshold data