CHECK_NRPE: Could not complete SSL handshake

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
tedgardener
Posts: 11
Joined: Fri Aug 29, 2014 10:27 am

CHECK_NRPE: Could not complete SSL handshake

Post by tedgardener »

:? :? :?

All:

OS: Ubuntu v.10.04 LTS

Despite the fact that on the remote host's nrpe.cfg file I have the nagios server's ip address listed as an allowed_hosts, when I run check_nrpe -H <remote host ip> i'm receiving an error that it can't complete the SSL handshake.

I've uninstalled nagios from the remote host and purged and reinstalled. Uninstalled and reinstalled on Nagios. I've even disabled SSL on the remote host, but to no avail.

Any ideas?

Ted
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: CHECK_NRPE: Could not complete SSL handshake

Post by Box293 »

The IP address will be defined in /etc/xinetd.d/nrpe if nrpe is running under xinetd.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
tedgardener
Posts: 11
Joined: Fri Aug 29, 2014 10:27 am

Re: CHECK_NRPE: Could not complete SSL handshake

Post by tedgardener »

Unfortunately, I checked that as well. Does not exist.
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: CHECK_NRPE: Could not complete SSL handshake

Post by Box293 »

How did you install nrpe on the remote host? What guide did you follow?
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
tedgardener
Posts: 11
Joined: Fri Aug 29, 2014 10:27 am

Re: CHECK_NRPE: Could not complete SSL handshake

Post by tedgardener »

Used the following sequence of commands:

sudo add-apt-repository ppa:nagiosinc/ppa
sudo apt-get update
sudo apt-get install sysstat (this is needed) nagios-agent
When prompted, I add the Nagios IP address.
Then I add remote host monitoring to Nagios.

Keep in mind that when I checked the nrpe.cfg file it has multiple old addresses from previous years. This is why I performed the apt-get remove and apt-get --purge procedures.

As an aside, is there a way to completely remove all of nagios if need be (e.g., config files, etc.)
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: CHECK_NRPE: Could not complete SSL handshake

Post by lmiltchev »

Do you have an "agent.cfg" file on the system? It may be located in: "/etc/nagios/nrpe.d/" directory. If you do, you will need to add the Nagios XI server's IP to the "allowed_hosts" line.
As an aside, is there a way to completely remove all of nagios if need be (e.g., config files, etc.)
You will need to remove the files/directories manually (rm -rf <path to the nagios dir>).
Be sure to check out our Knowledgebase for helpful articles and solutions!
tedgardener
Posts: 11
Joined: Fri Aug 29, 2014 10:27 am

Re: CHECK_NRPE: Could not complete SSL handshake

Post by tedgardener »

OK. Prior to uninstalling the agent again, does anyone have any other ideas why this isn't working. I'll work on sending info from the log files to see if that gives us a clue.
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: CHECK_NRPE: Could not complete SSL handshake

Post by Box293 »

lmiltchev wrote:Do you have an "agent.cfg" file on the system? It may be located in: "/etc/nagios/nrpe.d/" directory. If you do, you will need to add the Nagios XI server's IP to the "allowed_hosts" line.
I just finished testing nrpe on an 10.04 Ubuntu server, installing it the way you did.

lmiltchev pointed out to me that the location of the allowed_hosts is in /etc/nagios/nrpe.d/agent.cfg

What happens when you run this test from your nagios host (where the ip address is your ubuntu server).

Code: Select all

Command:
./check_nrpe -H 192.168.207.152

Output:
NRPE v2.12
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
tedgardener
Posts: 11
Joined: Fri Aug 29, 2014 10:27 am

Re: CHECK_NRPE: Could not complete SSL handshake

Post by tedgardener »

From Nagios

[root@localhost libexec]# ./check_nrpe -H <remote host IP>
CHECK_NRPE: Error - Could not complete SSL handshake.
[root@localhost libexec]#

remote host nrpe.cfg properly configured
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: CHECK_NRPE: Could not complete SSL handshake

Post by Box293 »

Can you please attach you nrpe.cfg file AND your /etc/nagios/nrpe.d/agent.cfg
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Locked