[Nagiosplug-checkins] nagiosplug NEWS,1.35,1.36

Holger Weiss hweiss at users.sourceforge.net
Sat Jul 21 18:29:03 CEST 2007


Update of /cvsroot/nagiosplug/nagiosplug
In directory sc8-pr-cvs16.sourceforge.net:/tmp/cvs-serv7201

Modified Files:
	NEWS 
Log Message:
Add "Connection: close" to the HTTP request header, which tells HTTP/1.1
servers to close the connection after completion of the response.  This
should be compatible with HTTP/1.0, as HTTP/1.0 allows for custom header
fields which should be ignored if not recognized by the server.  With
some server configurations, the server would keep the connection alive
without this header line (despite the plugin requesting HTTP/1.0),
resulting in the plugin running into either the server's or it's own
timeout (reported by Roman Schliessmeyer and Jesse Morgan via IRC).


Index: NEWS
===================================================================
RCS file: /cvsroot/nagiosplug/nagiosplug/NEWS,v
retrieving revision 1.35
retrieving revision 1.36
diff -u -d -r1.35 -r1.36
--- NEWS	10 Jul 2007 20:45:48 -0000	1.35
+++ NEWS	21 Jul 2007 16:29:01 -0000	1.36
@@ -2,6 +2,8 @@
 
 1.4.10 or 1.5 ??
 	Fix check_http buffer overflow vulnerability when following HTTP redirects
+	check_http now explicitly asks HTTP/1.1 servers to close the connection
+	  after completion of the response
 	Check_ldaps' guessing which secure method to use (starttls vs. ssl on connect)  
 	  is now deprecated. See --help for further information.
 	Check_disk now calls stat() on all filesystems to check. (Old: only the ones selected using -p) 





More information about the Commits mailing list