Werk #5756: check_mk_agent.linux, check_mk_agent.openwrt: specify message digest for encrypted agent output explicitly
Komponente | Checks & agents |
Titel | check_mk_agent.linux, check_mk_agent.openwrt: specify message digest for encrypted agent output explicitly |
Datum | 18.04.2018 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk-Version | 1.4.0p31 1.5.0b2 1.6.0b1 |
Level | Kleine Änderung |
Klasse | Bugfix |
Kompatibilität | Kompatibel - benötigt kein manuelles Eingreifen |
For encrypted agent output the default message digest algorithm of OpenSSL was used before. Prior to OpenSSL 1.1 the default is MD5 which is what the Check_MK server is expecting as well. Starting from OpenSSL 1.1. the default message digest algorithm changed to SHA-256 which leads to problems in the communication between hosts with a new OpenSSL version and the Check_MK server. Now the message digest algorithm is specified explicitly as MD5 to circumvent any ambiguity.