Module: check_mk Branch: master Commit: 4af123207b9b3dd52abfdddb458692cabc6ca7c6 URL: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=4af123207b9b3d… Author: Andreas Boesl <ab(a)mathias-kettner.de> Date: Mon Jul 24 12:51:16 2017 +0200 4853 FIX agent_netapp: Re-enabled some deprecated SSL Ciphers which were used in old 7mode filers Our latest builtin python version removed the support for some SSL ciphers, because they are considered deprecated/insecure. These old ciphers are required, because some of the 7mode filers are unable to work with newer ciphers. Change-Id: I1675b0601cae1f6267054f66ee553ef22470df94 --- .werks/4853 | 14 ++++++++++++++ agents/special/agent_netapp | 11 +++++++++++ 2 files changed, 25 insertions(+) diff --git a/.werks/4853 b/.werks/4853 new file mode 100644 index 0000000..1778c3e --- /dev/null +++ b/.werks/4853 @@ -0,0 +1,14 @@ +Title: agent_netapp: Re-enabled some deprecated SSL Ciphers which were used in old 7mode filers +Level: 1 +Component: checks +Class: fix +Compatible: compat +Edition: cre +State: unknown +Version: 1.5.0i1 +Date: 1500893070 + +Our latest builtin python version removed the support for some SSL ciphers, +because they are considered deprecated/insecure. + +These old ciphers are required, because some of the 7mode filers are unable to work with newer ciphers. diff --git a/agents/special/agent_netapp b/agents/special/agent_netapp index 334093d..77f2654 100755 --- a/agents/special/agent_netapp +++ b/agents/special/agent_netapp @@ -175,6 +175,17 @@ else: except: pass + requests.packages.urllib3.util.ssl_.DEFAULT_CIPHERS += ":" + ":".join([ + "DH+3DES", + "DH+HIGH", + "ECDH+3DES", + "ECDH+HIGH", + "RSA+3DES", + "RSA+HIGH", + ]) + + + try: # lxml was quite promising in our test environment: Uses 2 times less CPU resources # Unfortunaly, it is not a builtin module and need to be installed manually with