0.10.8

What's Changed

Minor release which adds NSCA documentation and a command line option for nscp nsca to set the host name --hostname.

The NSCA Guide can be found here

nscp nsca --host 127.0.0.1 --password secret-password ^
    --encryption aes256 --command "service check" --result 2 --hostname "my host name" --message "Hello From command line"

It also adds test cases against real NSCA server to ensure compatiblity.

Full Changelog: 0.10.7...0.10.8

0.10.7

PLEASE NOTE That there is a new legacy-xp binary which can be used on older version of windows..

NRPE updates

• NRPE setup now supports 2-way tls
• Also fixed many issues with the cli to make ti tork more reliable.

Command to set up 1-way TLS NRPE server

nscp nrpe install --allowed-hosts 127.0.0.1 --insecure=false ^
	--verify=none --certificate nsclient.pem --certificate-key nsclient.key

nscp nrpe install --allowed-hosts 127.0.0.1 --insecure=false ^
	--verify=peer-cert --certificate nsclient.pem --certificate-key nsclient.key --ca ca.pem

Installer:

Added installer option IMPORT_CONFIG to allow copying a configuration during installation.
This is a great way to simplify configuration distribution during installation if you do not have better tools in place.

To import the configuration from a http server you can do:

$ msiexec /i NSClient++.msi IMPORT_CONFIG=http://myserver.com/nsclient.ini

This release also fixes import of http configuration so you can do:

$ nscp settings --migrate-from https://raw.githubusercontent.com/mickem/nscp/refs/heads/main/tests/rest/nsclient.ini

Improved how debug in queries work

Using the debug option with queries is now much simpler.
First it will return the debug data instead of adding it to the log making it possible to use this remote (please note that many protocols have payload limits).

The output is now simplified as it includes useful details about the object as well as a standardized list:

ignored  c:\src\nscp\build\docker\debian-9\Dockerfile
match    c:\src\nscp\build\docker\files\plugin_pb2.py
ignored  c:\src\nscp\build\perl\echo_date.pl
match    c:\src\nscp\build\python\config.py
warning  c:\src\nscp\build\python\create_plugin_module.py
match    c:\src\nscp\build\python\create_zip_module.py
match    c:\src\nscp\build\python\mk_pyzip.py

Where:

ignored means the item did not match the filter
match means the item matched the filter and was not critical nor warning.
warning and critical means the item is a warning or a critical.

Windows XP support: is back

This version brings back experimental Windows XP support.
As I am unable to get a Windows XP machine up and running I cannot verify it but it runs on Windows 2008 (which is the oldest test machine I have) and in theory it should run on Windows XP with a lot of service packs.

If you have access to old machines, please do give it a spin and let me know how it goes.

To install NSClient++ on Windows XP use the Win32-legacy-xp packages below.

Please note: MSI files might not work (as it requires newer MSI version) but you should be able to use the zip in those cases.

Documentation

• Updated links and fixed various markdown issues making the documentation easier to read.
• A new guide explaining how to configure NRPE with and without certificate authentication making on boarding NRPE much much easier.
• Many other changes and fixes in the documentation

Updated to OpenSSL 3.5.x:

This is actually huge as OpenSSL which I updated to a year or so ago when I started to updated dependencies was the last 1.1.1 version.
There are numerous changes is 3.5.4 which we will eventually start to benefit from but for now the only benefit is that the certificate generation is a bit improved.

Various minor improvements:

• Fixed some configuration keys which where missing the comment describing what they are in the config file.
• Added option debug verify to show why certificate validation fails, this option will likely be removed and replaced by default handling in the future.
• check_memory Change text syntax of check_memory from only show used to show "type: used/total"
• CheckExternalScripts Added new option under [/settings/external scripts] called kill tree=true to kill process tree when exiting process.
• Fix for update not working on Windows 2025
• Updated the mongoose web server to latest version (and dependency)

0.10.6

What's Changed

Updated OpenSSL to 3.5.4

There was a CVE in OpenSSL which I do not think affects NSClient++ but I have updated the library just to be safe.

Bugfixes

• Fixed some configuration keys which where missing the comment describing what they are in the config file.
• Added test for nonstandard NRPE payload length to verify that it still works after the NRPE 4 updates.

Full Changelog: 0.10.5...0.10.6

0.10.5

What's Changed

Added installer option IMPORT_CONFIG to allow copying a configuration during installation.
This is a great way to simplify configuration distribution during installation if you do not have better tools in place.

To import the configuration from a http server you can do:

$ msiexec /i NSClient++.msi IMPORT_CONFIG=http://myserver.com/nsclient.ini

This release also fixes import of http configuration so you can do:

$ nscp settings --migrate-from https://raw.githubusercontent.com/mickem/nscp/refs/heads/main/tests/rest/nsclient.ini

Full Changelog: 0.10.4...0.10.5

0.10.4

What's Changed

NRPE setup now supports 2-way tls

Command to set up 1-way TLS NRPE server

nscp nrpe install ^
	--allowed-hosts 127.0.0.1 ^
	--insecure=false --verify=none ^
	--certificate nsclient.pem ^
	--certificate-key nsclient.key

Command to set up 2-way TLS NRPE server

nscp nrpe install ^
	--allowed-hosts 127.0.0.1 ^
	--insecure=false --verify=peer-cert ^
	--certificate nsclient.pem ^
	--certificate-key nsclient.key ^
	--ca ca.pem

debug queries is now much simpler.

Using the debug option with queries is now much simpler.
First it will return the debug data instead of adding it to the log making it possible to use this remote (please note that many protocols have payload limits).

THe output is now simplified as it includes useful details about the object as well as a standardised list:

ignored  c:\src\nscp\build\docker\debian-9\Dockerfile
ignored  c:\src\nscp\build\docker\debian-jessie\Dockerfile
match    c:\src\nscp\build\docker\files\plugin_pb2.py
ignored  c:\src\nscp\build\docker\ubuntu-14.04\Dockerfile
ignored  c:\src\nscp\build\docker\ubuntu-16.04\Dockerfile
ignored  c:\src\nscp\build\docker\ubuntu-16.10\Dockerfile
ignored  c:\src\nscp\build\docker\ubuntu-17.04\Dockerfile
ignored  c:\src\nscp\build\perl\echo_date.pl
ignored  c:\src\nscp\build\perl\echo_version.pl
ignored  c:\src\nscp\build\perl\postbuild.pl
ignored  c:\src\nscp\build\powershell\install-nscp.ps1
ignored  c:\src\nscp\build\powershell\setup-machine.ps1
ignored  c:\src\nscp\build\powershell\teardown-machine.ps1
ignored  c:\src\nscp\build\powershell\validate-install.ps1
match    c:\src\nscp\build\python\config.py
warning  c:\src\nscp\build\python\create_plugin_module.py
match    c:\src\nscp\build\python\create_zip_module.py
match    c:\src\nscp\build\python\fetchdeps.py
match    c:\src\nscp\build\python\mk_pyzip.py
match    c:\src\nscp\build\python\msdev-to-dynamic.py
match    c:\src\nscp\build\python\msdev-to-static.py
match    c:\src\nscp\build\python\msdev-to-x.py
match    c:\src\nscp\build\python\msdev-to-x64.py
match    c:\src\nscp\build\python\openssl_xp_patch.py

Where:

• ignored means the item did not match the filter
• match means the item matched the filter and was not critical nor warning.
• warningand critical means the item is a warning or a critical.

Added tests to validate thet NRP works correctly.

There are now test which use actual ccheck_nrpe command to validwte that NRPE works.

Full Changelog: 0.10.3...0.10.4

0.10.3

What's Changed

OpenSSL updated to 3.5.2

This is actually huge as OpenSSL which I updated to a year or so ago when I started to updated dependencies was the last 1.1.1 version.
There are numerous changes is 3.5.2 which we will eventually start to benefit from but for now the only benefit is that the certificate generation is abit improved.

Fixed some issues in the NRPE CLI

Settings up two-way ssl now works correctly.

nscp nrpe install --insecure=false --arguments=safe --allowed-hosts=172.17.251.17 --verify=peer-cert

Replaced boost::bind with lambda

This is another rather big change which updates the code to modern C++.

Full Changelog: 0.10.2...0.10.3

0.10.2

What's Changed

New NRPE Guide

A new guid explaining how to configure NRPE with and without certificate authentication making on boarding NRPE much much easier.
Read the guide here

Other changes:

• When enabling insecure mode the default ciphers should be ALL:!MD5:@strength[:@SECLEVEL=0]
• Added option debug verify to show why certificate validation fails, this option will likely be removed and replaced by default handling in the future.

Full Changelog: 0.10.1...0.10.2

0.10.1

What's Changed

• Fix links in docs reference page by @The-Rockers in #1037
• Updated getting started guide by @mickem in #1030
• Updated the mongoose web server to latest version (and dependency) by @mickem in #1038
• Possible fix for update not working on Windows 2025 by @mickem in #1039

New Contributors

• @The-Rockers made their first contribution in #1037

Full Changelog: 0.10.0...0.10.1

0.10.0

What's Changed

This version brings back experimental Windows XP support.
As I am unable to get a Windows Xp machine up and running I cannot verify it but it runs on Windows 2008 (which is the oldest test machine I have) and in theory it should run on Windows XP with a lot of service packs.

If you have access to old machines, please do give it a spin and let me know how it goes.

To install NSClient++ on Windows XP use the Win32-legacy-xp packages below.

Please note: MSI files might not work (as it requires newer MSI version) but you should be able to use the zip in those cases.

Full Changelog: 0.9.15...0.10.0

0.9.15

What's Changed

• Default generated certificates are now sha256 by @mickem in #1022

Full Changelog: 0.9.14...0.9.15