NRPE 4.0.3 not working with Amazon Linux 2023 and openssl 3

[dlambert]

Trying to compile nrpe-4.0.3 on Amazon Linux 2023.

Looks like there are a number of errors with openssl 3.0 that ships with Amazon Linux 2023.
Am I doing something wrong ?

Thanks,

-- Donnie

[donnie@dev nrpe-4.0.3]# make all
cd ./src/; make
make[1]: Entering directory '/usr/local/src/nrpe-4.0.3/src'
gcc -g -O2 -DHAVE_CONFIG_H -I ../include -I ./../include -o nrpe ./nrpe.c ./uti ls.c ./acl.c -lssl -lcrypto
./nrpe.c: In function ‘init_ssl’:
./nrpe.c:287:9: warning: ‘ENGINE_load_builtin_engines’ is deprecated: Since Open SSL 3.0 [-Wdeprecated-declarations]
287 | ENGINE_load_builtin_engines();
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from ../include/common.h:36,
from ./nrpe.c:38:
/usr/include/openssl/engine.h:358:28: note: declared here
358 | OSSL_DEPRECATEDIN_3_0 void ENGINE_load_builtin_engines(void);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~
./nrpe.c:288:9: warning: ‘RAND_set_rand_engine’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
288 | RAND_set_rand_engine(NULL);
| ^~~~~~~~~~~~~~~~~~~~
In file included from ../include/common.h:35,
from ./nrpe.c:38:
/usr/include/openssl/rand.h:52:27: note: declared here
52 | OSSL_DEPRECATEDIN_3_0 int RAND_set_rand_engine(ENGINE *engine);
| ^~~~~~~~~~~~~~~~~~~~
./nrpe.c:289:9: warning: ‘ENGINE_register_all_complete’ is deprecated: Since Ope nSSL 3.0 [-Wdeprecated-declarations]
289 | ENGINE_register_all_complete();
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from ../include/common.h:36,
from ./nrpe.c:38:
/usr/include/openssl/engine.h:415:27: note: declared here
415 | OSSL_DEPRECATEDIN_3_0 int ENGINE_register_all_complete(void);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
./nrpe.c:450:25: warning: ‘ERR_get_error_line_data’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
450 | while ((x = ERR_get_error_line_data(NULL, NULL, NULL, NULL)) != 0) {
| ^~~~~
In file included from ../include/common.h:34,
from ./nrpe.c:38:
/usr/include/openssl/err.h:425:15: note: declared here
425 | unsigned long ERR_get_error_line_data(const char **file, int *line,
| ^~~~~~~~~~~~~~~~~~~~~~~
./nrpe.c:474:22: warning: implicit declaration of function ‘get_dh2048’ [-Wimpli cit-function-declaration]
474 | dh = get_dh2048();
| ^~~~~~~~~~
./nrpe.c:474:20: warning: assignment to ‘DH *’ {aka ‘struct dh_st *’} from ‘int’ makes pointer from integer without a cast [-Wint-conversion]
474 | dh = get_dh2048();
| ^
./nrpe.c:476:17: warning: ‘DH_free’ is deprecated: Since OpenSSL 3.0 [-Wdeprecat ed-declarations]
476 | DH_free(dh);
| ^~~~~~~
In file included from /usr/include/openssl/dsa.h:31,
from /usr/include/openssl/x509.h:37,
from /usr/include/openssl/ssl.h:32,
from ../include/common.h:32,
from ./nrpe.c:38:
/usr/include/openssl/dh.h:207:28: note: declared here
207 | OSSL_DEPRECATEDIN_3_0 void DH_free(DH *dh);
| ^~~~~~~
./nrpe.c: In function ‘handle_conn_ssl’:
./nrpe.c25: warning: ‘ERR_get_error_line_data’ is deprecated: Since OpenSS L 3.0 [-Wdeprecated-declarations]
2031 | while ((x = ERR_get_error_line_data(NULL, NULL, NULL, NULL)) != 0) {
| ^~~~~
In file included from ../include/common.h:34,
from ./nrpe.c:38:
/usr/include/openssl/err.h:425:15: note: declared here
425 | unsigned long ERR_get_error_line_data(const char **file, int *line,
| ^~~~~~~~~~~~~~~~~~~~~~~
/usr/bin/ld: /tmp/cc61YVa3.o: in function `init_ssl':
/local/src/nrpe-4.0.3/src/./nrpe.c:474:(.text+0x4e1): undefined reference to `ge t_dh2048'
collect2: error: ld returned 1 exit status
make[1]: *** [Makefile:48: nrpe] Error 1
make[1]: Leaving directory '/usr/local/src/nrpe-4.0.3/src'
make: *** [Makefile:65: all] Error 2

[cdietsch]

Hi @dlambert,

Can you double check you have the following dependencies installed?

Code: Select all

dnf install -y gcc glibc glibc-common openssl openssl-devel perl wget

[dlambert]

[root@dev]# dnf install -y gcc glibc glibc-common openssl openssl-devel perl wget
Last metadata expiration check: 0:24:48 ago on Wed Jan 7 17:11:45 2026.
Package gcc-11.5.0-5.amzn2023.0.5.x86_64 is already installed.
Package glibc-2.34-231.amzn2023.0.1.x86_64 is already installed.
Package glibc-common-2.34-231.amzn2023.0.1.x86_64 is already installed.
Package openssl-1:3.2.2-1.amzn2023.0.2.x86_64 is already installed.
Package openssl-devel-1:3.2.2-1.amzn2023.0.2.x86_64 is already installed.
Package perl-4:5.32.1-477.amzn2023.0.7.x86_64 is already installed.
Package wget-1.21.3-1.amzn2023.0.4.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!

Yup, I did have those installed.

[tsoods]

Greetings

I am facing the exact same issue when trying to compile on Ubuntu 22.04LTS.
The openssl-devel package and others are installed.
Found an older report: https://github.com/NagiosEnterprises/nrpe/issues/258
Is there hope of compiling 4.0.3 on Ubuntu 22.04LTS and Amazon Linux 2023, or is it likely that we have no choice but to hop onto 4.1.x?

Sincerely

[cdietsch]

If you have all the dependencies installed and are still facing build issues, it is likely you will have to try to build a newer 4.1.x version.

[tsoods]

Greetings

I can confirm that 4.1.3 successfully compiles on Ubuntu 22.04LTS.

On a side note, I doubt this is the correct post to mention this and I am sorry, but the check_ssl_validity plugin for Nagios cannot be run on Ubuntu 22.04LTS without specifically installing the following Perl libraries, which I hope someone adds to the Nagios plugins installation docs because I do not wish anyone else the same pain of realizing some packages are missing after they have already set up Nagios servers in airtight networks:

• libcrypt-x509-perl for Crypt::X509

• libtimedate-perl for Date::Parse

• libwww-perl for LWP::Simple

• libtext-glob-perl for Text::Glob

Sincerely

[dlambert]

Thanks all the source compile of 4.1.3 did it for me.

I appreciate all the help.

-- Donnie