NRPE - v3 Enhanced Security

[mpedros]

Dear Team:

Based on the Article Number: 519 "NRPE - v3 Enhanced Security" I am trying to implement SSL in the communication between my Nagios Core 4.3.4 and my Debian 8.8 unsuccessfully. The NRPE versions are the following:

Nagios Core (IP: 192.168.10.101):
NRPE Plugin for Nagios
Copyright (c) 1999-2008 Ethan Galstad ([email protected])
Version: 2.15


Debian (IP: 192.168.10.111):
NRPE Plugin for Nagios
Version: 3.2.1

It seems that you do not recognize the options of the certificates I use:

[root@localhost libexec]# ./check_nrpe -A /usr/local/nagios/etc/ssl/ca/ca_cert.pem -C /usr/local/nagios/etc/ssl/nagios_server_certs/nagios_server.pem -K /usr/local/nagios/etc/ssl/nagios_server_certs/nagios_server.key -H 192.168.10.111
./check_nrpe: invalid option -- 'A'
./check_nrpe: invalid option -- 'C'
./check_nrpe: invalid option -- 'K'

...

I make a clarification, NRPE works correctly between both when I DO NOT use SSL.

It will be a problem of NRPE versions?
Thank you very much for your help!

[mpedros]

Dear Team:

It was indeed a problem with the NRPE plugin version, I just updated to version 3.2.1 and it works correctly!
Attached commands:

[root@localhost nrpe-nrpe-3.2.1]# cd /usr/local/nagios/libexec/
[root@localhost libexec]# ./check_nrpe -A /usr/local/nagios/etc/ssl/ca/ca_cert.pem -C /usr/local/nagios/etc/ssl/nagios_server_certs/nagios_server.pem -K /usr/local/nagios/etc/ssl/nagios_server_certs/nagios_server.key -H 192.168.10.111
NRPE v3.2.1
[root@localhost libexec]# ./check_nrpe -A /usr/local/nagios/etc/ssl/ca/ca_cert.pem -C /usr/local/nagios/etc/ssl/nagios_server_certs/nagios_server.pem -K /usr/local/nagios/etc/ssl/nagios_server_certs/nagios_server.key -H 192.168.10.111 -c check_load
OK - load average: 0.08, 0.02, 0.01|load1=0.080;0.150;0.300;0; load5=0.020;0.100;0.250;0; load15=0.010;0.050;0.200;0;
[root@localhost libexec]#

Thank you very much to all!

[kyang]

Sounds good! I'll be closing this thread!

If you have any more questions, feel free to create another thread.

Thanks for using the Nagios Support Forum!