Werk #5756: check_mk_agent.linux, check_mk_agent.openwrt: specify message digest for encrypted agent output explicitly

Component	Checks & agents
Title	check_mk_agent.linux, check_mk_agent.openwrt: specify message digest for encrypted agent output explicitly
Date	Apr 18, 2018
Level	Trivial Change
Class	Bug Fix
Compatibility	Compatible - no manual interaction needed
Checkmk versions & editions	1.6.0b1 Not yet released Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME) 1.6.0b1 Not yet released Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME) 1.6.0b1 Not yet released Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME) 1.6.0b1 Not yet released Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME) 1.6.0b1 Not yet released Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME) 1.6.0b1 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME) 1.5.0b2 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME) 1.4.0p31 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

For encrypted agent output the default message digest algorithm of OpenSSL was used before. Prior to OpenSSL 1.1 the default is MD5 which is what the Check_MK server is expecting as well. Starting from OpenSSL 1.1. the default message digest algorithm changed to SHA-256 which leads to problems in the communication between hosts with a new OpenSSL version and the Check_MK server. Now the message digest algorithm is specified explicitly as MD5 to circumvent any ambiguity.

To the list of all Werks