Page 1 of 1

Solaris - CHECK_NRPE: Error - Could not complete SSL handsha

Posted: Wed Mar 26, 2014 8:45 am
by isat-iad
Hi,

I am having an error on a Solaris 10 (x86) server with NRPE. First, I tried to install the solaris agent (solaris-nrpe-agent.tar.gz); the install works, but I get the following error in the logs when I try to start the agent:

Code: Select all

 nrpe: fatal: libc.so.1: version `SUNW_1.22.7' not found (required by file /opt/nagios/bin/nrpe
I then tried to install NRPE from source, again the install works fine and this time the NRPE agent starts, but I always get:
CHECK_NRPE: Error - Could not complete SSL handshake.
When I run the command:

Code: Select all

/opt/nagios/libexec/check_nrpe -H 127.0.0.1
(I get the same error when I run the command from the Nagios server)

I had a look in the troubleshooting section of the NRPE document and have made sure that the allowed hosts section of /etc/nagios/nrpe.cfg contains 127.0.0.1. Here is the NRPE process that runs:

Code: Select all

# ps -ef | grep nrpe
  nagios 21336     1   0 12:26:10 ?           0:00 /opt/nagios/bin/nrpe -c /etc/nagios/nrpe.cfg -d
And here is the config:

Code: Select all

 # grep allowed_hosts /etc/nagios/nrpe.cfg
allowed_hosts=127.0.0.1,<IP_ADDR_OF_NAGIOS_SERVER>
I tried different versions of NRPE - 2.12, 2.14 and 2.15 but the SSL error is always the same. I even tried installing openssl from source and configuring NRPE against that, but still no luck.

Do you have any suggestions or has anybody else experienced the same issue?

Thanks,
Michael

Re: Solaris - CHECK_NRPE: Error - Could not complete SSL han

Posted: Wed Mar 26, 2014 11:21 am
by lmiltchev
Have you restarted the NRPE on the client after modifying the following line?

Code: Select all

allowed_hosts=127.0.0.1,<IP_ADDR_OF_NAGIOS_SERVER>
Do you have check_nrpe installed on the Solaris box, so that you can test the check locally?

Code: Select all

./check_nrpe -H locatehost
or

Code: Select all

./check_nrpe -H 127.0.0.1

Re: Solaris - CHECK_NRPE: Error - Could not complete SSL han

Posted: Wed Mar 26, 2014 1:04 pm
by isat-iad
OK, I've resolved this issue - the resolution is to compile openssl for 32-bit (although the system architecture is 64-bit).

In case anybody else has the problem, you need to download openssl and configure with (assuming your system is x86):

Code: Select all

./Configure solaris-x86-gcc shared
make
make install
Then compile nrpe with (assuming you installed openssl in /usr/local/ssl):

Code: Select all

./configure --with-ssl=/usr/local/ssl --with-ssl-lib=/usr/local/ssl/lib --prefix=/opt/nagios
make
make install
Then restart nrpe and it should work.

Thanks,
Michael

Re: Solaris - CHECK_NRPE: Error - Could not complete SSL han

Posted: Wed Mar 26, 2014 1:27 pm
by abrist
Brilliant. Thanks for posting the solution here for future peoples.