Xymon Mailing List Archive search

Encryption

list Stef Coene
Fri, 25 Aug 2023 14:53:58 +0200
Message-Id: <user-98831cf857e3@xymon.invalid>

Hi,

If anyone is interested, I documented the steps I did to use wget and curl as alternative:
https://www.docum.org/drupal/content/client-server-encryption

@Jeremy Laidman: yes, data from client-local.cfg is also provided.
In fact, when a client connects to the server, the data returned is the relevant lines from client-local.cfg


Stef

On 2023-08-23 13:57, Stef Coene wrote:
Hi,

We solved the encryption by using a wget and/or curl script alternative for the xymon client. It's a drop-in replacement.
We have a setup script that checks if wget or cups exists and it creates a symlink for the xymon command to the script that works.
The script uses a username and password to connect to xymoncgimsg.cgi over https to send the data.
We use 1 username / paswoord for all clients but with some scripting you can give each client it's own username / password.

If wget or cups is not available (some old AIX servers can not connect to a https server...), the good old binary is used without encryption :(

I can document it somewhere if anyone is interested.
It's not that complicated.


For the Windows clients we also use https as much as possible.

I have some patches for the Powershell client that allows for testing a new XML file. We want to manage the XML files centrally and want to avoid mistakes that can disable the client. So this allows us to test a new config file before overwriting the old one.
I also added the ping test command for this and did some changes so data can be send to multiple Xymon servers.
I will create some patches and send them to the mailinglist.


Stef