Sporadic SSL handshake errors

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
and1100
Posts: 93
Joined: Mon Mar 25, 2013 8:37 am

Sporadic SSL handshake errors

Post by and1100 »

Hi,

I've noticed that a large majority of our servers are randomly reporting "nrpe[3301]: Error: Could not complete SSL handshake. 5 " in the client logs which causes checks to enter a CRITICAL state with the following error:

Additional Info:

CHECK_NRPE: Socket timeout after 10 seconds.

I've been unable to track down the cause of this issue since it's so widespread. Is there a way to perhaps disable SSL handshaking on our Nagios server? If anyone has experienced this issue and has any ideas, please share.

Thank you!
rkennedy
Posts: 6579
Joined: Mon Oct 05, 2015 11:45 am

Re: Sporadic SSL handshake errors

Post by rkennedy »

You should be able to use the -n flag.
[root@suse11 libexec]# ./check_nrpe
Incorrect command line arguments supplied

NRPE Plugin for Nagios
Copyright (c) 1999-2008 Ethan Galstad ([email protected])
Version: 2.15
Last Modified: 09-06-2013
License: GPL v2 with exemptions (-l for more info)
SSL/TLS Available: Anonymous DH Mode, OpenSSL 0.9.6 or higher required

Usage: check_nrpe -H <host> [ -b <bindaddr> ] [-4] [-6] [-n] [-u] [-p <port>] [-t <timeout>] [-c <command>] [-a <arglist...>]

Options:
-n = Do no use SSL
Former Nagios Employee
Locked