From owner-freebsd-ports-bugs@FreeBSD.ORG Wed Dec 5 11:30:03 2007 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DB99D16A419 for ; Wed, 5 Dec 2007 11:30:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id C7ADE13C45A for ; Wed, 5 Dec 2007 11:30:03 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id lB5BU3XP096177 for ; Wed, 5 Dec 2007 11:30:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id lB5BU3pF096171; Wed, 5 Dec 2007 11:30:03 GMT (envelope-from gnats) Date: Wed, 5 Dec 2007 11:30:03 GMT Message-Id: <200712051130.lB5BU3pF096171@freefall.freebsd.org> To: freebsd-ports-bugs@FreeBSD.org From: Jarrod Sayers Cc: Subject: Re: ports/118434: [patch] net-mgmt/nrpe2 should enable SSL by default X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Jarrod Sayers List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Dec 2007 11:30:03 -0000 The following reply was made to PR ports/118434; it has been noted by GNATS. From: Jarrod Sayers To: adaugherity@tamu.edu Cc: bug-followup@FreeBSD.org Subject: Re: ports/118434: [patch] net-mgmt/nrpe2 should enable SSL by default Date: Wed, 5 Dec 2007 21:54:03 +1030 Andrew, The default for net-mgmt/nrpe2 is to be compiled without SSL support. This results in both nrpe2 and check_nrpe2 being unable to support SSL connections or services, and thus non-SSL becomes the default connection method. If the port is built with SSL support, nrpe2 supports only SSL connections but check_nrpe2 supports both with the default being SSL. You may then use the -n flag from the command line to connect to hosts without the SSL binary. I have tested the differences between the builds and am unable to find any issues short of attempting to connect a non-SSL check_nrpe2 to an SSL only nrpe2 but the error is clear and handled correctly. If you can provide more details, I am happy to investigate, however I am slightly lost at your comment regarding the default for check_nrpe2 being SSL enabled, it isn't. Does your current /etc/make.conf contain WITH_SSL=yes? Jarrod.