Hi,
I am getting the error when monitoring website with ssl certificate, I have configured the service using monitoring wizard.
3078940952:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:674:
CRITICAL - Cannot retrieve server certificate.
sslv3 alert handshake failure
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: sslv3 alert handshake failure
Could you post your service configuration for this.
Thanks
Thanks
Re: sslv3 alert handshake failure
/check_http -H <<HOSTNAME>> -C 30
CRITICAL - Cannot make SSL connection
3078002968:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:674:
CRITICAL - Cannot retrieve server certificate.
CRITICAL - Cannot make SSL connection
3078002968:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:674:
CRITICAL - Cannot retrieve server certificate.
Thanks
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: sslv3 alert handshake failure
Can you check to see what version of the plugins you are running
If it is less than 1.4.15 you may want to install the newer plugins, I believe this was fixed in 1.4.15
You can do that by doing the following
Code: Select all
cd /usr/local/nagios/libexec/
./check_http -V
You can do that by doing the following
Code: Select all
cd /tmp
wget http://assets.nagios.com/downloads/nagiosxi/agents/nagios-plugins-1.4.15.tar.gz
tar xzf nagios-plugins-1.4.15.tar.gz
cd nagios-plugins-1.4.15
time ./configure
time make clean
time make
time make install
Re: sslv3 alert handshake failure
I have now upgraded the nagios plugins, check_http is now v1.4.15-46-gefa2, however I am still getting the error, but strangely this is only affecting one website, other websites are fine. I am still getting the error.
I did checK_tcp and ports 80/443 are both responding.
I did checK_tcp and ports 80/443 are both responding.
Thanks
-
scottwilkerson
- DevOps Engineer
- Posts: 19396
- Joined: Tue Nov 15, 2011 3:11 pm
- Location: Nagios Enterprises
- Contact:
Re: sslv3 alert handshake failure
Is this a standard Nagios XI install?
What type of certificates are these sites using?
If they are public facing sites, would you mind sending one of the URL's to me in a PM so I can try from a different machine to determine if the problem is machine specific.
What type of certificates are these sites using?
If they are public facing sites, would you mind sending one of the URL's to me in a PM so I can try from a different machine to determine if the problem is machine specific.