Disabling SSL in REALLY old Nagios self compiled setup
-
- Posts: 14
- Joined: Wed Apr 19, 2017 3:21 pm
Disabling SSL in REALLY old Nagios self compiled setup
Hi,
How to disable SSL in a really really old compilation of Nagios? Please hit me with ideas, I will send version number in a follow up post.
I am assuming that nagios was compiled with SSL support, "way back when".
Thank you very very much.
How to disable SSL in a really really old compilation of Nagios? Please hit me with ideas, I will send version number in a follow up post.
I am assuming that nagios was compiled with SSL support, "way back when".
Thank you very very much.
Re: Disabling SSL in REALLY old Nagios self compiled setup
You mean to say you want to disable HTTPS? That would be done via the apache configs. If you share all of the apache configs on this machine, we may be able to lend some insights.
Former Nagios employee
https://www.mcapra.com/
https://www.mcapra.com/
-
- Posts: 14
- Joined: Wed Apr 19, 2017 3:21 pm
Re: Disabling SSL in REALLY old Nagios self compiled setup
I did not make myself clear. We are using SSL and we tried check_nrpe -n to disable SSL but that did not work.
Some older clients work fine with the ciphers currently being used, however, the check fails on newer clients with stronger ciphers, we would like for this to work on the newer clients without SSL.
Some older clients work fine with the ciphers currently being used, however, the check fails on newer clients with stronger ciphers, we would like for this to work on the newer clients without SSL.
- tacolover101
- Posts: 432
- Joined: Mon Apr 10, 2017 11:55 am
Re: Disabling SSL in REALLY old Nagios self compiled setup
from my understanding, using the plugin with -n should work and be backwards compatible. your client side NRPE configuration could be telling it to use SSL though. take a look at the configuration.
if it's a matter of the actual NRPE binary supporting SSL, then you'll need to recompile without ssl.
if it's a matter of the actual NRPE binary supporting SSL, then you'll need to recompile without ssl.
-
- Former Nagios Staff
- Posts: 4583
- Joined: Wed Sep 21, 2016 10:29 am
- Location: NoLo, Minneapolis, MN
- Contact:
Re: Disabling SSL in REALLY old Nagios self compiled setup
If you give us some errors, we can help you run through https://assets.nagios.com/downloads/nag ... utions.pdf
Also, if you could post the remote nrpe.cfg, that would helpful. Thanks!
Also, if you could post the remote nrpe.cfg, that would helpful. Thanks!
-
- Posts: 14
- Joined: Wed Apr 19, 2017 3:21 pm
Re: Disabling SSL in REALLY old Nagios self compiled setup
I will post command output tomorrow.
It appears that I need to compile nrpe without ssl support, is that possible?
This page does not give any indication of the arguments to the configure command: https://support.nagios.com/kb/article.php?id=515
It appears that I need to compile nrpe without ssl support, is that possible?
This page does not give any indication of the arguments to the configure command: https://support.nagios.com/kb/article.php?id=515
- tacolover101
- Posts: 432
- Joined: Mon Apr 10, 2017 11:55 am
Re: Disabling SSL in REALLY old Nagios self compiled setup
i believe that nrpe being compiled without the openssl and openssl-devel packages on the system will build it without ssl support. running a -v against it will tell you how it's currently compiled.
if i remember correctly, --with-openssl is the flag to use to compile with support, so perhaps --without-openssl might work?
also, duringthe compile process there is a section of text that pops up with your selected compile options (just output, no way to change at this part)
if i remember correctly, --with-openssl is the flag to use to compile with support, so perhaps --without-openssl might work?
also, duringthe compile process there is a section of text that pops up with your selected compile options (just output, no way to change at this part)
-
- Posts: 14
- Joined: Wed Apr 19, 2017 3:21 pm
Re: Disabling SSL in REALLY old Nagios self compiled setup
I tried compiling nrpe without ssl, but could not:
[nrpe-3.0.1]# ./configure --enable-command-args --without-openssl
<snip>
configure: WARNING: unrecognized options: --without-openssl
[nrpe-3.0.1]# ./configure --enable-command-args --without-openssl
<snip>
configure: WARNING: unrecognized options: --without-openssl
-
- Posts: 14
- Joined: Wed Apr 19, 2017 3:21 pm
Re: Disabling SSL in REALLY old Nagios self compiled setup
Okay I'm playing around with the -n option, this is my command and the error message, nothing in logs:
/usr/local/nagios/libexec/check_nrpe -n -H server_name -c check_mem
CHECK_NRPE: Error receiving data from daemon.
/usr/local/nagios/libexec/check_nrpe -n -H server_name -c check_mem
CHECK_NRPE: Error receiving data from daemon.
-
- Posts: 14
- Joined: Wed Apr 19, 2017 3:21 pm
Re: Disabling SSL in REALLY old Nagios self compiled setup
[:~]# /usr/local/nagios/libexec/check_nrpe -n -H server_name
CHECK_NRPE: Error receiving data from daemon.
CHECK_NRPE: Error receiving data from daemon.