Werk #5756: check_mk_agent.linux, check_mk_agent.openwrt: specify message digest for encrypted agent output explicitly

Component Checks & agents
Title check_mk_agent.linux, check_mk_agent.openwrt: specify message digest for encrypted agent output explicitly
Date Apr 18, 2018
Level Trivial Change
Class Bug Fix
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
1.6.0b1 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.5.0b2 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.4.0p31 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

For encrypted agent output the default message digest algorithm of OpenSSL was used before. Prior to OpenSSL 1.1 the default is MD5 which is what the Check_MK server is expecting as well. Starting from OpenSSL 1.1. the default message digest algorithm changed to SHA-256 which leads to problems in the communication between hosts with a new OpenSSL version and the Check_MK server. Now the message digest algorithm is specified explicitly as MD5 to circumvent any ambiguity.

To the list of all Werks