Page 1 of 1

SSL Handshake error for some monitors not for all

Posted: Wed May 17, 2017 9:39 pm
by mdhinesh
Hi Friends,

As shown in attachment, Nagios is throwing "CHECK_NRPE: Error - Could not complete SSL handshake" for some specific monitors not for all. If i execute the command from Nagios Core server, It is not throwing error.

-bash-4.1$ /usr/local/nagios/libexec/check_nrpe -H XXXXX.YYYYY.com -p 5665 -c check_swap
SWAP OK - 100% free (3999 MB out of 3999 MB) |swap=3999MB;0;0;0;3999
-bash-4.1$

This is momentary issue,If one service is throwing this error, After some time this monitor will be in OK state and some other monitor will throw this error. It is generating lot of false alerts.

Thanks,
Dhinesh

Re: SSL Handshake error for some monitors not for all

Posted: Thu May 18, 2017 12:52 pm
by tgriep
The first place to look is in the NRPE troubleshooting guide at the link below so see if you can resolve the issue.
https://assets.nagios.com/downloads/nag ... utions.pdf
If it is failing intermittently on the servers or it it failing all of the time on those servers?

Re: SSL Handshake error for some monitors not for all

Posted: Thu May 18, 2017 4:21 pm
by mdhinesh
Hi,

We followed those steps already. It is happening intermittently for some services.

Thanks,
Dhinesh.M

Re: SSL Handshake error for some monitors not for all

Posted: Thu May 18, 2017 4:29 pm
by dwhitfield
mdhinesh wrote:It is generating lot of false alerts.
You could increase the time between checks if it is switching on and off. Are the hosts going up and down as well? It sounds to me like a network issue.

Also, do you have anything set up to automatically restart services? Maybe it's failing completely and then being turned back on.

Is the NRPE version the same on working checks versus non-working checks?