Another - check_http Invalid option - SSL is not available

[MBowman325]

The fix isn't directly install openssl-devel. (Well, may be, but not quite)

The OS is SLES 11 SP3

Gearing up to upgrade to Nagios 4.1.1 from 3.5 along with nagios-plugins, pnp4nagios, ect.

Stepping through the process I've updated the plugins. Sadly I didn't note the version I came from (easy enough to roll back if needed but looks like it was 1.5) but attempting to install 2.1.1. While they do install, I get indications that the development package isn't installed for openssl when I build the plugins. (I didn't notice this until all my SSL checks failed, having previously been working). The error is "configure: WARNING: OpenSSL or GnuTLS libs could not be found or were disabled" and it fails with the title.

So I've double checked what should be the devel packages for SLES and openssl and installed gnutls. I've run ./configure --with-openssl=/usr/bin/openssl

Output from zypper se openssl

i | libopenssl0_9_8 | Secure Sockets and Transport Layer Security | package
i | libopenssl0_9_8-32bit | Secure Sockets and Transport Layer Security | package
i | openssl | Secure Sockets and Transport Layer Security | package
i | openssl-certs | CA certificates for OpenSSL | package
i | openssl-debuginfo | Debug information for package openssl | package
i | openssl-debugsource | Debug sources for package openssl | package
i | openssl1-debuginfo | Debug information for package openssl1 | package
i | openssl1-debugsource | Debug sources for package openssl1 | package

So, what am I missing? And no, there is no openssl-devel package on SLES. (openssl1 is for versions >= 1.0.0)

# openssl version
OpenSSL 0.9.8j-fips 07 Jan 2009

[ssax]

Looks like libopenssl-devel is not installed from your zypper output.

Try installing libopenssl-devel and see if that fixes your problem.


Thank you

[ssax]

Sorry, I edited my post, should be libopenssl-devel.

[MBowman325]

Geez, it looks just like that. I swear I installed that via yast earlier too... I'll double check that.

[MBowman325]

There's my confusion.. I did but it's labeled as a patch.. Yast2 shouldn't let me patch it unless it's already present.. (I had a grep -v patch on the one above.)

I've typically dealt with RH derived systems, need to get more familiar with Suse and yast..

I'll look more tomorrow. I pulled a copy of check_http from 1.5 for use until this is sorted.

tfcuokopcsnag01:/usr/local/nagios/bin # zypper se openssl | grep i\ \|
i | dbgsp3-curl-openssl1-12481 | Optional update for curl-openssl1 | patch
i | dbgsp3-libopenssl-devel | Security update for OpenSSL | patch
i | dbgsp3-libopenssl1-devel | Security update for OpenSSL | patch
i | dbgsp3-openssl-12059 | Recommended update for openssl | patch
i | dbgsp3-openssl-12193 | Recommended update for openssl | patch
i | dbgsp3-openssl-12264 | Security update for openssl | patch
i | dbgsp3-openssl-12434 | Security update for openssl | patch
i | dbgsp3-openssl1-12038 | Recommended update for openssl1 | patch
i | dbgsp3-openssl1-12256 | Security update for openssl | patch
i | libopenssl0_9_8 | Secure Sockets and Transport Layer Security | package
i | libopenssl0_9_8-32bit | Secure Sockets and Transport Layer Security | package
i | openssl | Secure Sockets and Transport Layer Security | package
i | openssl-certs | CA certificates for OpenSSL | package
i | openssl-debuginfo | Debug information for package openssl | package
i | openssl-debugsource | Debug sources for package openssl | package
i | openssl1-debuginfo | Debug information for package openssl1 | package
i | openssl1-debugsource | Debug sources for package openssl1 | package
i | php5-openssl | PHP5 Extension Module | package
i | slessp3-libopenssl-devel | Security update for OpenSSL | patch
i | slessp3-openssl-12059 | Recommended update for openssl | patch
i | slessp3-openssl-12193 | Recommended update for openssl | patch
i | slessp3-openssl-12264 | Security update for openssl | patch
i | slessp3-openssl-certs | Security update for openssl-certs | patch

[MBowman325]

Pulled down the SDK this morning and installed from RPM, all set.

i | libopenssl-devel | Include Files and Libraries mandatory for Development | package

Its always the little things, no?

[tmcdonald]

Yea, we're a Cent/RHEL shop here, so the SUSE/YaST hurdle tripped us a bit as well.

Are we all good to close this otherwise?

[MBowman325]

We're good to close this thread.