Could not complete SSL handshake

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
agriffin
Posts: 876
Joined: Mon May 09, 2011 9:36 am

Re: Could not complete SSL handshake

Post by agriffin »

Everything you've posted looks fine to me, so I'm not sure what's going on here. One thing to check up on are your firewall rules, because you can get that SSL error from firewall issues as well.
jbruyet
Posts: 235
Joined: Wed Dec 28, 2011 12:14 pm

Re: Could not complete SSL handshake

Post by jbruyet »

Anyone else? For all of you who are using Debian for your Nagios servers did you do a package install or a source install?

Thanks,

Joe B
User avatar
lmiltchev
Former Nagios Staff
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: Could not complete SSL handshake

Post by lmiltchev »

Can you run the following commands and post the output?

Code: Select all

/etc/init.d/nagios-nrpe-server restart
ps -ef | grep nrpe
Be sure to check out our Knowledgebase for helpful articles and solutions!
jbruyet
Posts: 235
Joined: Wed Dec 28, 2011 12:14 pm

Re: Could not complete SSL handshake

Post by jbruyet »

--> agriffin, iptables has been shut down:
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT

--> lmiltchev:
root@DebCS:/home/jobee/Downloads# /etc/init.d/nagios-nrpe-server restart
Stopping nagios-nrpe: nagios-nrpe.
Starting nagios-nrpe: nagios-nrpe.
root@DebCS:/home/jobee/Downloads# ps -ef | grep nrpe
nagios 8823 1 0 13:47 ? 00:00:00 /usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d
root 8830 8738 0 13:47 pts/0 00:00:00 grep nrpe

Thanks,

Joe B
User avatar
lmiltchev
Former Nagios Staff
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: Could not complete SSL handshake

Post by lmiltchev »

Do you have an "agent.cfg" file? Try:

Code: Select all

vi /etc/nagios/nrpe.d/agent.cfg
On my debian test machine I am not using xinetd and in my "agent.cfg" file I have:

Code: Select all

dont_blame_nrpe=1
allowed_hosts=<my_nagios_server_IP>
Be sure to check out our Knowledgebase for helpful articles and solutions!
jbruyet
Posts: 235
Joined: Wed Dec 28, 2011 12:14 pm

Re: Could not complete SSL handshake

Post by jbruyet »

Kudos to you lmiltchev!!! I just created the file, rebooted the server and now I have:

debcs CPU Load OK 05-08-2012 16:20:01 0d 0h 1m 9s 1/3 OK - load average: 0.31, 0.23, 0.09

Onward and upward!

Thanks again,

Joe B
agriffin
Posts: 876
Joined: Mon May 09, 2011 9:36 am

Re: Could not complete SSL handshake

Post by agriffin »

Glad to see you got things figured out.
Locked