Can someone kindly point me to documentation ?
I would like a like of NRPE agents compatiable with NagiosXI 5.8.1
I have a nagiosxi 5.8.1 on redhat 8 and am running into issues talking to a box with nrpe v2.15
The error I get is "CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake".
I have no problems talking to another box with INRPE v3.2.1
NRPE Agent
-
benjaminsmith
- Posts: 5324
- Joined: Wed Aug 22, 2018 4:39 pm
- Location: saint paul
Re: NRPE Agent
Hi @matson-itops,
That's a common issue, and we have a kb article to help troubleshoot it.
NRPE - CHECK_NRPE: Error - Could Not Complete SSL Handshake
Check the allowed hosts setting in nrpe.cfg first and then make sure you have SSL compiled. Let us know if you're able to resolve it.
Benjamin
That's a common issue, and we have a kb article to help troubleshoot it.
NRPE - CHECK_NRPE: Error - Could Not Complete SSL Handshake
Check the allowed hosts setting in nrpe.cfg first and then make sure you have SSL compiled. Let us know if you're able to resolve it.
Benjamin
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Be sure to check out our Knowledgebase for helpful articles and solutions!
Be sure to check out our Knowledgebase for helpful articles and solutions!
-
matson-itops
- Posts: 133
- Joined: Wed Nov 18, 2015 11:19 pm
Re: NRPE Agent
We gave up and upgraded the nagios agent.
But now have a new issue
we're installing version 4.0.2 install is failing on redhat 7.9 boxes for A-subcomponents / nagiosplugins
when using Nagios Linux Agent Installer Script v2.1.1 from you guys we get the following error :
Making install in plugins
make[1]: Entering directory `/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins'
/bin/sh ../libtool --tag=CC --mode=link gcc -DNP_VERSION='"2.3.3"' -g -O2 -L. -L/usr/local/lib -o check_http check_http.o libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libtool: link: gcc -DNP_VERSION=\"2.3.3\" -g -O2 -o check_http check_http.o -L. -L/usr/local/lib libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libnpcommon.a(sslutils.o): In function `np_net_ssl_init_with_hostname_version_and_cert':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:150: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:176: undefined reference to `SSL_CTX_set_options'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:107: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:154: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:155: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:156: undefined reference to `OPENSSL_init_crypto'
libnpcommon.a(sslutils.o): In function `np_net_ssl_check_cert_real':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:282: undefined reference to `X509_getm_notAfter'
collect2: error: ld returned 1 exit status
But now have a new issue
we're installing version 4.0.2 install is failing on redhat 7.9 boxes for A-subcomponents / nagiosplugins
when using Nagios Linux Agent Installer Script v2.1.1 from you guys we get the following error :
Making install in plugins
make[1]: Entering directory `/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins'
/bin/sh ../libtool --tag=CC --mode=link gcc -DNP_VERSION='"2.3.3"' -g -O2 -L. -L/usr/local/lib -o check_http check_http.o libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libtool: link: gcc -DNP_VERSION=\"2.3.3\" -g -O2 -o check_http check_http.o -L. -L/usr/local/lib libnpcommon.a ../lib/libnagiosplug.a ../gl/libgnu.a -lssl -lcrypto -lnsl -lresolv -lpthread -ldl
libnpcommon.a(sslutils.o): In function `np_net_ssl_init_with_hostname_version_and_cert':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:150: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:176: undefined reference to `SSL_CTX_set_options'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:107: undefined reference to `TLS_client_method'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:154: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:155: undefined reference to `OPENSSL_init_ssl'
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:156: undefined reference to `OPENSSL_init_crypto'
libnpcommon.a(sslutils.o): In function `np_net_ssl_check_cert_real':
/tmp/linux-nrpe-agent/subcomponents/nagiosplugins/nagios-plugins-2.3.3/plugins/sslutils.c:282: undefined reference to `X509_getm_notAfter'
collect2: error: ld returned 1 exit status
Re: NRPE Agent
Do you have openssl-devel installed? If not, try installing it first and then run it again:
If it is already installed, send the output of this command on the remote system:
Thank you!
Code: Select all
yum install openssl-develCode: Select all
rpm -qa | grep openssl-
matson-itops
- Posts: 133
- Joined: Wed Nov 18, 2015 11:19 pm
Re: NRPE Agent
tis already installed
[dummy@xxx ~]$ rpm -qa | grep openssl
openssl-libs-1.0.2k-21.el7_9.x86_64
openssl-devel-1.0.2k-21.el7_9.x86_64
openssl-1.0.2k-21.el7_9.x86_64
[dummy@xxx ~]$ rpm -qa | grep openssl
openssl-libs-1.0.2k-21.el7_9.x86_64
openssl-devel-1.0.2k-21.el7_9.x86_64
openssl-1.0.2k-21.el7_9.x86_64
Re: NRPE Agent
Hi,
I think you might have TWO openssl installed.
you should be using the "-I/usr/include" and "-L/usr/lib" not "-I/usr/local/include" and "-l/usr/local/lib" during the make.
Can you please check:
Also, please do:
I'm thinking those under "/usr/local/include" and "/usr/local/lib" should be removed since they might belong to some python modules.
One thing you could try, if you don't want to remove those two folders is to rename them temporary:
Now, re-run the install with new "./configure" to pull in correct "/usr/include" and "/usr/lib" path.
So, let clean up the old "linux-nrpe-agent" under "/tmp":
Please upload the install.log when completed, only if there is issue!!
Regards,
Vinh
I think you might have TWO openssl installed.
you should be using the "-I/usr/include" and "-L/usr/lib" not "-I/usr/local/include" and "-l/usr/local/lib" during the make.
Can you please check:
Code: Select all
ls -l /usr/local/include/ssl.h
ls -l /usr/include/ssl.h
Code: Select all
ls -l /usr/local/lib/
One thing you could try, if you don't want to remove those two folders is to rename them temporary:
Code: Select all
mv -f /usr/local/include /usr/local/include_keep
mf -f /usr/local/lib/ /usr/local/lib_keep
So, let clean up the old "linux-nrpe-agent" under "/tmp":
Code: Select all
cd /tmp
rm -rf linux-nrpe-agent
wget https://assets.nagios.com/downloads/nagiosxi/agents/linux-nrpe-agent.tar.gz
tar xzf linux-nrpe-agent.tar.gz
cd linux-nrpe-agent
./fullinstall
Regards,
Vinh