From 6fe14f88c8d438454147be8abb55679f291e7cc3 Mon Sep 17 00:00:00 2001 From: Michael Friedrich Date: Tue, 21 Nov 2017 09:38:56 +0100 Subject: [PATCH] ITL: Drop ssl_sni default setting That's not supported by all plugin suites out there, and as such should not be the default value. The user must set it explicitly. fixes #5775 --- doc/10-icinga-template-library.md | 2 +- itl/command-plugins.conf | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/doc/10-icinga-template-library.md b/doc/10-icinga-template-library.md index 17bb38b71..60a6a3960 100644 --- a/doc/10-icinga-template-library.md +++ b/doc/10-icinga-template-library.md @@ -1307,7 +1307,7 @@ ssl_port | **Optional.** The port that should be checked. D ssl_timeout | **Optional.** Timeout in seconds for the connect and handshake. The plugin default is 10 seconds. ssl_cert_valid_days_warn | **Optional.** Warning threshold for days before the certificate will expire. When used, the default for ssl_cert_valid_days_critical is 0. ssl_cert_valid_days_critical | **Optional.** Critical threshold for days before the certificate will expire. When used, ssl_cert_valid_days_warn must also be set. -ssl_sni | **Optional.** The `server_name` that is send to select the SSL certificate to check. Important if SNI is used. Defaults to "$ssl_address$". +ssl_sni | **Optional.** The `server_name` that is send to select the SSL certificate to check. Important if SNI is used. ### ssmtp diff --git a/itl/command-plugins.conf b/itl/command-plugins.conf index f4c01134c..017667893 100644 --- a/itl/command-plugins.conf +++ b/itl/command-plugins.conf @@ -350,7 +350,6 @@ object CheckCommand "ssl" { vars.ssl_port = 443 vars.ssl_cert_valid_days_warn = false vars.ssl_cert_valid_days_critical = false - vars.ssl_sni = "$ssl_address$" } -- 2.40.0