nagios-nrpe/debian/NEWS

93 lines
3.8 KiB
Plaintext
Raw Permalink Normal View History

2017-09-03 10:52:40 +02:00
nagios-nrpe (3.2.0-2) unstable; urgency=medium
The bug that caused the SSL support between NRPE 2.x and 3.x not
to work has been fixed.
Because the default SSL support without certificates configured
in nrpe.cfg uses pre-generated key data, configuring SSL
certificates is strongly advised when STunnel is not used.
The ssl-cert package can be used to generate a self-signed
certificate, but CA certificates like those from Let's Encrypt
are a better choice.
SSL support has been re-enabled by default, to be better compatible
with previous NRPE versions where SSL support was enabled by default
too.
The check_nrpe command definition has been updated to enable SSL
support (by removing the -n option) and the check_nrpe_ssl command
definition has been removed. The previous check_nrpe command
definition which disables SSL support is available with the new
check_nrpe_nossl command definition.
-- Bas Couwenberg <sebastic@debian.org> Fri, 07 Jul 2017 13:48:38 +0200
2016-12-24 10:24:09 +01:00
nagios-nrpe (3.0.1-1) unstable; urgency=medium
The check_nrpe command definition has been updated to remove the
arguments option, because nagios-nrpe-server does not support
command arguments since 2.15-1. And the check_nrpe_1arg command
definition has been removed.
If you're using the check_nrpe_1arg command in your Nagios/Icinga
configuration, you need to replace it with check_nrpe.
SSL support is disabled by default, the reworked SSL/TLS support in
NRPE requires configuration before it can be used. Read the
instructions in /usr/share/doc/nagios-nrpe-server/README.SSL.md.gz
before enabling SSL support in /etc/default/nagios-nrpe-server.
The default check_nrpe command in check_nrpe.cfg has been updated
to disable SSL by default too. The check_nrpe_ssl command has been
added to connect to the NRPE daemon over SSL.
Beware that the new NRPE daemon only works with old check_nrpe
plugins when SSL support is disabled on both sides, likewise the
new check_nrpe plugin only works with the old NRPE daemon when SSL
support is disabled.
To use SSL between the NRPE client and server, configuring Stunnel
is recommended.
-- Bas Couwenberg <sebastic@debian.org> Mon, 05 Dec 2016 01:16:46 +0100
2014-07-15 18:30:36 +02:00
nagios-nrpe (2.15-1) unstable; urgency=high
This update disables the command-args support in nrpe. The feature
has several security problems and is often used wrong. If you have to
use this feature recompile the package with --enable-command-args
in debian/rules.
-- Alexander Wirt <formorer@debian.org> Tue, 15 Jul 2014 09:52:48 +0200
nagios-nrpe (2.12-4) unstable; urgency=low
The pidfile creation mechanism changed with this update. If you do not
add "pid_file=/var/run/nagios/nrpe.pid" to you nrpe config take care that
the user "nagios" is able to write to your pidfile location. You can also
change the initscript to create the pid directory on your own.
-- Alexander Wirt <formorer@debian.org> Tue, 07 Jul 2009 07:42:13 +0200
nagios-nrpe (2.12-3) unstable; urgency=low
The homedirectory of the nagios user moved to /var/lib/nagios
which is now common on all nagios related packages. Its recommended
that you migrate an already existing nagios user to use /var/lib/nagios
as homedirectory.
-- Alexander Wirt <formorer@debian.org> Sat, 21 Mar 2009 09:08:58 +0100
nagios-nrpe (2.4-1) unstable; urgency=low
the nagios-nrpe-doc package is no longer provided. the documentation
can now be found in /usr/share/doc/nagios-nrpe-{server|plugins}. new
versions of the plugin and server packages conflict with the doc
package to prevent the old (and possibly incorrect in the future)
documentation from remaining. to fully purge all information about
the package you should run:
dpkg -P nagios-nrpe-doc
-- sean finney <seanius@debian.org> Mon, 13 Mar 2006 15:47:47 +0100