From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Dec 4 19:20:01 2007 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E882916A420 for ; Tue, 4 Dec 2007 19:20:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id C63E813C467 for ; Tue, 4 Dec 2007 19:20:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id lB4JK1QR093763 for ; Tue, 4 Dec 2007 19:20:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id lB4JK1dD093762; Tue, 4 Dec 2007 19:20:01 GMT (envelope-from gnats) Resent-Date: Tue, 4 Dec 2007 19:20:01 GMT Resent-Message-Id: <200712041920.lB4JK1dD093762@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Andrew Daugherity Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D2CFD16A417 for ; Tue, 4 Dec 2007 19:16:07 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id C28E713C44B for ; Tue, 4 Dec 2007 19:16:07 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.2/8.14.2) with ESMTP id lB4JG6ct092185 for ; Tue, 4 Dec 2007 19:16:06 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.2/8.14.1/Submit) id lB4JG61T092184; Tue, 4 Dec 2007 19:16:06 GMT (envelope-from nobody) Message-Id: <200712041916.lB4JG61T092184@www.freebsd.org> Date: Tue, 4 Dec 2007 19:16:06 GMT From: Andrew Daugherity To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: ports/118434: [patch] net-mgmt/nrpe2 should enable SSL by default X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Dec 2007 19:20:02 -0000 >Number: 118434 >Category: ports >Synopsis: [patch] net-mgmt/nrpe2 should enable SSL by default >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Tue Dec 04 19:20:01 UTC 2007 >Closed-Date: >Last-Modified: >Originator: Andrew Daugherity >Release: 6.2 >Organization: Texas A&M University >Environment: FreeBSD imsweb1.tamu.edu 6.2-RELEASE-p9 FreeBSD 6.2-RELEASE-p9 #0: Thu Nov 29 01:11:37 UTC 2007 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/SMP amd64 >Description: The default setting for the SSL option is OFF, which means the binary packages are built without SSL. As the default for the check_nrpe2 Nagios plugin is to use SSL (SSL can be disabled with the -n option), I believe the default for the NRPE server (i.e. this port) should also be to enable SSL. >How-To-Repeat: Install the net-mgmt/nrpe2 port with default options or install the binary package from a mirror. Attempt to run the check_nrpe2 plugin and watch it fail unless you specify the -n option to disable SSL. >Fix: Set the option to default to on like this: (I also bumped PORTREVISION; not sure about the policy on that.) --- Makefile.orig Tue Dec 4 12:13:11 2007 +++ Makefile Tue Dec 4 13:12:56 2007 @@ -7,7 +7,7 @@ PORTNAME= nrpe2 PORTVERSION= 2.7 -PORTREVISION= 2 +PORTREVISION= 3 CATEGORIES= net-mgmt MASTER_SITES= ${MASTER_SITE_SOURCEFORGE} MASTER_SITE_SUBDIR= nagios @@ -21,7 +21,7 @@ USE_PERL5_BUILD= yes USE_RC_SUBR= nrpe2 -OPTIONS= SSL "SSL support" off \ +OPTIONS= SSL "SSL support" on \ ARGS "Enable command arguments *POTENTIAL SECURITY RISK*" off GNU_CONFIGURE= yes >Release-Note: >Audit-Trail: >Unformatted: