check_nrpe localhost error "unable to complete SSL handshake

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
themekanik
Posts: 2
Joined: Tue Dec 10, 2013 4:37 pm

check_nrpe localhost error "unable to complete SSL handshake

Post by themekanik »

Please be gentle as this is my first post. I am new to Nagios and new to NRPE as well. I have installed Nagios and the NRPE plugin on RHEL 6.4 Virtual Machines. I have been debugging this error for a few days. I have exhausted all of the "solutions" found on the internet that deals with this problem. when I enter the command:

/usr/local/nagios/libexec/check_nrpe -H localhost

it returns:

CHECK_NRPE: Error - Could not complete SSL handshake

when i enter

/usr/local/nagios/libexec/check_nrpe -H 127.0.0.1

it returns:

NRPE v2.15

I have checked /etc/hosts to make sure it is properly configured and it is. I even edited /etc/hosts and set 127.0.0.1 to "test" and ran /usr/local/nagios/libexec/check_nrpe -H test and it worked! What is going on?

Thank you for any help.
abrist
Red Shirt
Posts: 8334
Joined: Thu Nov 15, 2012 1:20 pm

Re: check_nrpe localhost error "unable to complete SSL hands

Post by abrist »

Are you using xinetd, or just a vanilla init script to start the nrpe daemon?
You may find the following doc interesting:
http://assets.nagios.com/downloads/nagi ... utions.pdf
Former Nagios employee
"It is turtles. All. The. Way. Down. . . .and maybe an elephant or two."
VI VI VI - The editor of the Beast!
Come to the Dark Side.
themekanik
Posts: 2
Joined: Tue Dec 10, 2013 4:37 pm

Re: check_nrpe localhost error "unable to complete SSL hands

Post by themekanik »

Yes I am using xinetd to start NRPE. I have been through the document at the link you posted before, but unfortunately nothing in there fixed the problem.
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: check_nrpe localhost error "unable to complete SSL hands

Post by slansing »

Well for one you are trying to run NRPE against your local system which is not required as it is meant to execute plugins remotely. You can execute those same plugins locally with the same effect. Secondly you may have compiled with SSL support. I don't see an actual issue here because in your second example you are able to call a remote host from NRPE which is working as intended.
dongwenting
Posts: 1
Joined: Mon Jun 09, 2014 1:40 am

Re: check_nrpe localhost error "unable to complete SSL hands

Post by dongwenting »

i have the same error, and i solved this problem like this.

Code: Select all

vi /etc/xinetd.d/nrpe
only_from       = 127.0.0.1 localhost
service xinetd restart

i hope this may help.
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: check_nrpe localhost error "unable to complete SSL hands

Post by slansing »

That would work as well, you can in some cases get an SSL handshake error if you do not have your Core/XI server in the allowed hosts list.
Locked