Page 1 of 1

check_nrpe localhost error "unable to complete SSL handshake

Posted: Tue Dec 10, 2013 4:50 pm
by themekanik
Please be gentle as this is my first post. I am new to Nagios and new to NRPE as well. I have installed Nagios and the NRPE plugin on RHEL 6.4 Virtual Machines. I have been debugging this error for a few days. I have exhausted all of the "solutions" found on the internet that deals with this problem. when I enter the command:

/usr/local/nagios/libexec/check_nrpe -H localhost

it returns:

CHECK_NRPE: Error - Could not complete SSL handshake

when i enter

/usr/local/nagios/libexec/check_nrpe -H 127.0.0.1

it returns:

NRPE v2.15

I have checked /etc/hosts to make sure it is properly configured and it is. I even edited /etc/hosts and set 127.0.0.1 to "test" and ran /usr/local/nagios/libexec/check_nrpe -H test and it worked! What is going on?

Thank you for any help.

Re: check_nrpe localhost error "unable to complete SSL hands

Posted: Tue Dec 10, 2013 5:18 pm
by abrist
Are you using xinetd, or just a vanilla init script to start the nrpe daemon?
You may find the following doc interesting:
http://assets.nagios.com/downloads/nagi ... utions.pdf

Re: check_nrpe localhost error "unable to complete SSL hands

Posted: Wed Dec 11, 2013 4:39 pm
by themekanik
Yes I am using xinetd to start NRPE. I have been through the document at the link you posted before, but unfortunately nothing in there fixed the problem.

Re: check_nrpe localhost error "unable to complete SSL hands

Posted: Wed Dec 11, 2013 5:34 pm
by slansing
Well for one you are trying to run NRPE against your local system which is not required as it is meant to execute plugins remotely. You can execute those same plugins locally with the same effect. Secondly you may have compiled with SSL support. I don't see an actual issue here because in your second example you are able to call a remote host from NRPE which is working as intended.

Re: check_nrpe localhost error "unable to complete SSL hands

Posted: Mon Jun 09, 2014 1:44 am
by dongwenting
i have the same error, and i solved this problem like this.

Code: Select all

vi /etc/xinetd.d/nrpe
only_from       = 127.0.0.1 localhost
service xinetd restart

i hope this may help.

Re: check_nrpe localhost error "unable to complete SSL hands

Posted: Mon Jun 09, 2014 9:43 am
by slansing
That would work as well, you can in some cases get an SSL handshake error if you do not have your Core/XI server in the allowed hosts list.