tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

ITL: Drop ssl_sni default setting 

That's not supported by all plugin suites out there, and as such
should not be the default value. The user must set it explicitly.

fixes #5775
This commit is contained in:
Michael Friedrich 2017-11-21 09:38:56 +01:00
parent df10d2a295
commit 6fe14f88c8
2 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/10-icinga-template-library.md
View File

@ -1307,7 +1307,7 @@ ssl_port | **Optional.** The port that should be checked. D
ssl_timeout | **Optional.** Timeout in seconds for the connect and handshake. The plugin default is 10 seconds.
ssl_cert_valid_days_warn | **Optional.** Warning threshold for days before the certificate will expire. When used, the default for ssl_cert_valid_days_critical is 0.
ssl_cert_valid_days_critical | **Optional.** Critical threshold for days before the certificate will expire. When used, ssl_cert_valid_days_warn must also be set.
ssl_sni | **Optional.** The `server_name` that is send to select the SSL certificate to check. Important if SNI is used. Defaults to "$ssl_address$".
ssl_sni | **Optional.** The `server_name` that is send to select the SSL certificate to check. Important if SNI is used.
### ssmtp <a id="plugin-check-command-ssmtp"></a>

1
itl/command-plugins.conf
View File

@ -350,7 +350,6 @@ object CheckCommand "ssl" {
vars.ssl_port = 443
vars.ssl_cert_valid_days_warn = false
vars.ssl_cert_valid_days_critical = false
vars.ssl_sni = "$ssl_address$"
}