sslv3 alert handshake failure

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
Flava
Posts: 68
Joined: Wed Feb 01, 2012 10:06 am

sslv3 alert handshake failure

Post by Flava »

Hi,

I am getting the error when monitoring website with ssl certificate, I have configured the service using monitoring wizard.

3078940952:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:674:
CRITICAL - Cannot retrieve server certificate.
Thanks
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: sslv3 alert handshake failure

Post by scottwilkerson »

Could you post your service configuration for this.

Thanks
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Flava
Posts: 68
Joined: Wed Feb 01, 2012 10:06 am

Re: sslv3 alert handshake failure

Post by Flava »

/check_http -H <<HOSTNAME>> -C 30
CRITICAL - Cannot make SSL connection
3078002968:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:674:
CRITICAL - Cannot retrieve server certificate.
Thanks
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: sslv3 alert handshake failure

Post by scottwilkerson »

Can you check to see what version of the plugins you are running

Code: Select all

cd /usr/local/nagios/libexec/
./check_http -V
If it is less than 1.4.15 you may want to install the newer plugins, I believe this was fixed in 1.4.15

You can do that by doing the following

Code: Select all

cd /tmp
wget http://assets.nagios.com/downloads/nagiosxi/agents/nagios-plugins-1.4.15.tar.gz
tar xzf nagios-plugins-1.4.15.tar.gz
cd nagios-plugins-1.4.15
time ./configure
time make clean
time make
time make install
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Flava
Posts: 68
Joined: Wed Feb 01, 2012 10:06 am

Re: sslv3 alert handshake failure

Post by Flava »

I have now upgraded the nagios plugins, check_http is now v1.4.15-46-gefa2, however I am still getting the error, but strangely this is only affecting one website, other websites are fine. I am still getting the error.

I did checK_tcp and ports 80/443 are both responding.
Thanks
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: sslv3 alert handshake failure

Post by scottwilkerson »

Is this a standard Nagios XI install?

What type of certificates are these sites using?

If they are public facing sites, would you mind sending one of the URL's to me in a PM so I can try from a different machine to determine if the problem is machine specific.
Former Nagios employee
Creator:
Human Design Website
Get Your Human Design Chart
Locked