diff options
| author | Joel Hans <joel@netdata.cloud> | 2020-06-04 07:09:16 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2020-06-05 00:09:16 +1000 |
| commit | b1c96ce59d2eb7e46b35609b03715c9c15243aa6 (patch) | |
| tree | 64be84d3f7de02a6b7cebb20d4f8381b3b6236dc /claim | |
| parent | f53631297973d7acd0c35e28f22c80c5c64945b3 (diff) | |
Add notes/known issues section to installation page (#9053)
* Add notes section to installer with OpenSSL
* Add LibreSSL and Clang
* Libre
* Remove LibreSSL warning
* Add sections about CFLAGS to install and claim
* Update
* Retrigger CI
Diffstat (limited to 'claim')
| -rw-r--r-- | claim/README.md | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/claim/README.md b/claim/README.md index 0fdcd8f854..beab8977f7 100644 --- a/claim/README.md +++ b/claim/README.md @@ -189,6 +189,20 @@ might be having with the ACLK or claiming process. Use these keys and the information below to troubleshoot the ACLK. +#### Claiming on older distributions (Ubuntu 14.04, Debian 8, CentOS 6) + +If you're running an older Linux distribution or one that has reached EOL, such as Ubuntu 14.04 LTS, Debian 8, or CentOS +6, your Agent may not be able to securely connect to Netdata Cloud due to an outdated version of OpenSSL. These old +versions of OpenSSL cannot perform [hostname validation](https://wiki.openssl.org/index.php/Hostname_validation), which +helps securely encrypt SSL connections. + +We recommend you reinstall Netdata with a [static build](/packaging/installer/methods/kickstart-64.md), which uses an +up-to-date version of OpenSSL with hostname validation enabled. + +If you choose to continue using the outdated version of OpenSSL, your node will still connect to Netdata Cloud, albeit +with hostname verification disabled. Without verification, your Netdata Cloud connection could be vulnerable to +man-in-the-middle attacks. + #### cloud-enabled is false If `cloud-enabled` is `false`, you probably ran the installer with `--disable-cloud` option. |