[Xymon] Xymon 4.3.30 Released

[Japheth Cleaver]

Hi Ralph,

For direct SSL wrapping of client submission to xymond, yes. For 
authentication of source messages via proxy or intermediary, no.

For high-volume situations, or where a reply is not needed, cgimsg will 
still be a useful mechanism. SSL setup, teardown, and decryption in the 
core daemon still has an impact, so offloading that to a receiver for 
termination would be recommended depending on your scale.

Regards,
-jc

On 8/14/2020 7:30 PM, Ralph M wrote:
> Is the 4.4 release going to have encrypted communications?  I'm not 
> supposed to send plain text over the network, so I've been faking it 
> with curl posting to xymoncgimsg on port 443.  It would be really nice 
> to get port 1984 opened and do it properly.
>
> Thanks,
>
> Ralph Mitchell
>
>
> On Fri, Jul 31, 2020 at 11:33 AM James Louis <jglouisjr at gmail.com 
> <mailto:jglouisjr at gmail.com>> wrote:
>
>     Thanks for the update Japheth!
>
>     On Fri, Jul 31, 2020 at 9:27 AM Japheth Cleaver
>     <cleaver at terabithia.org <mailto:cleaver at terabithia.org>> wrote:
>
>         Hi Jim,
>
>         I'm looking at the XSS report and sorting through a variety of
>         the patches since this release now.
>         There will be a 4.3.31 release with this as well as other
>         updates, as well as a 4.4 pre-release. Due to there being a
>         longish gap, a maintenance release is appropriate.
>
>         -jc
>
>
>         On 7/31/2020 7:15 AM, James Louis wrote:
>>         Japheth,
>>
>>         Will 4.3.31 be out soon or will it jump to 4.4?
>>
>>         Thanks,
>>         Jim
>>
>>         On Thu, Sep 5, 2019 at 5:29 PM Japheth Cleaver
>>         <cleaver at terabithia.org <mailto:cleaver at terabithia.org>> wrote:
>>
>>             Xymon 4.3.30 has been released and is now available for
>>             download.
>>
>>             4.3.30 is mostly a bug-fix release, quashing issues
>>             stemming from the
>>             security fixes in 4.3.29, including improperly-tight
>>             restrictions on
>>             allowed characters in hostname for browsing along with
>>             several other
>>             parsing errors. Thanks in particular to Tom Schmidt for
>>             his assistance
>>             in tracking these down.
>>
>>             Xymon should also now be more easily buildable on older
>>             GCC versions
>>             without the diagnostics pragma available.
>>
>>             Xymon 4.3.30 is available from the Xymon SourceForge page at
>>             https://sourceforge.net/projects/xymon/
>>
>>             As always, thank you to all who have contributed code,
>>             ideas, and features
>>             to the project!
>>
>>
>>             Regards,
>>             Japheth "J.C." Cleaver
>>
>>             _______________________________________________
>>             Xymon mailing list
>>             Xymon at xymon.com <mailto:Xymon at xymon.com>
>>             http://lists.xymon.com/mailman/listinfo/xymon
>>
>>
>>
>>         -- 
>>         *Jim Louis
>>
>>         \\\\||////
>>                   \ ~ ~  /
>>                   | @ @ |
>>         *
>>         *--oOo---(_)---oOo--
>>
>>         *
>>
>>         “It does me no injury for my neighbor to say there are twenty
>>         gods, or no God. It neither picks my pocket nor breaks my leg.”
>>
>>         ~ Thomas Jefferson
>>
>
>
>
>     -- 
>     *Jim Louis
>
>     \\\\||////
>               \ ~ ~  /
>               | @ @ |
>     *
>     *--oOo---(_)---oOo--
>
>     *
>
>     “It does me no injury for my neighbor to say there are twenty
>     gods, or no God. It neither picks my pocket nor breaks my leg.”
>
>     ~ Thomas Jefferson
>
>     _______________________________________________
>     Xymon mailing list
>     Xymon at xymon.com <mailto:Xymon at xymon.com>
>     http://lists.xymon.com/mailman/listinfo/xymon
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20200814/ee74ace5/attachment.htm>