NSClient

What's Changed

Updated OpenSSL to 3.5.4

There was a CVE in OpenSSL which I do not think affects NSClient++ but I have updated the library just to be safe.

Bugfixes

• Fixed some configuration keys which where missing the comment describing what they are in the config file.
• Added test for nonstandard NRPE payload length to verify that it still works after the NRPE 4 updates.

Full Changelog: https://github.com/mickem/nscp/compare/0.10.5...0.10.6

What's Changed

Added installer option IMPORT_CONFIG to allow copying a configuration during installation. This is a great way to simplify configuration distribution during installation if you do not have better tools in place.

To import the configuration from a http server you can do:

$ msiexec /i NSClient++.msi IMPORT_CONFIG=http://myserver.com/nsclient.ini

This release also fixes import of http configuration so you can do:

$ nscp settings --migrate-from https://raw.githubusercontent.com/mickem/nscp/refs/heads/main/tests/rest/nsclient.ini

Full Changelog: https://github.com/mickem/nscp/compare/0.10.4...0.10.5

What's Changed

NRPE setup now supports 2-way tls

Command to set up 1-way TLS NRPE server

nscp nrpe install ^
    --allowed-hosts 127.0.0.1 ^
    --insecure=false --verify=none ^
    --certificate nsclient.pem ^
    --certificate-key nsclient.key

Command to set up 2-way TLS NRPE server

nscp nrpe install ^
    --allowed-hosts 127.0.0.1 ^
    --insecure=false --verify=peer-cert ^
    --certificate nsclient.pem ^
    --certificate-key nsclient.key ^
    --ca ca.pem

debug queries is now much simpler.

Using the debug option with queries is now much simpler. First it will return the debug data instead of adding it to the log making it possible to use this remote (please note that many protocols have payload limits).

THe output is now simplified as it includes useful details about the object as well as a standardised list:

ignored  c:\src\nscp\build\docker\debian-9\Dockerfile
ignored  c:\src\nscp\build\docker\debian-jessie\Dockerfile
match    c:\src\nscp\build\docker\files\plugin_pb2.py
ignored  c:\src\nscp\build\docker\ubuntu-14.04\Dockerfile
ignored  c:\src\nscp\build\docker\ubuntu-16.04\Dockerfile
ignored  c:\src\nscp\build\docker\ubuntu-16.10\Dockerfile
ignored  c:\src\nscp\build\docker\ubuntu-17.04\Dockerfile
ignored  c:\src\nscp\build\perl\echo_date.pl
ignored  c:\src\nscp\build\perl\echo_version.pl
ignored  c:\src\nscp\build\perl\postbuild.pl
ignored  c:\src\nscp\build\powershell\install-nscp.ps1
ignored  c:\src\nscp\build\powershell\setup-machine.ps1
ignored  c:\src\nscp\build\powershell\teardown-machine.ps1
ignored  c:\src\nscp\build\powershell\validate-install.ps1
match    c:\src\nscp\build\python\config.py
warning  c:\src\nscp\build\python\create_plugin_module.py
match    c:\src\nscp\build\python\create_zip_module.py
match    c:\src\nscp\build\python\fetchdeps.py
match    c:\src\nscp\build\python\mk_pyzip.py
match    c:\src\nscp\build\python\msdev-to-dynamic.py
match    c:\src\nscp\build\python\msdev-to-static.py
match    c:\src\nscp\build\python\msdev-to-x.py
match    c:\src\nscp\build\python\msdev-to-x64.py
match    c:\src\nscp\build\python\openssl_xp_patch.py

Where:

• ignored means the item did not match the filter
• match means the item matched the filter and was not critical nor warning.
• warningand critical means the item is a warning or a critical.

Added tests to validate thet NRP works correctly.

There are now test which use actual ccheck_nrpe command to validwte that NRPE works.

Full Changelog: https://github.com/mickem/nscp/compare/0.10.3...0.10.4