Page 1 of 1

nrpe configure without ssl on Solaris 10

Posted: Tue Jun 02, 2015 1:46 pm
by grenley
Hi.
I am trying to compile nrpe on Solaris 10.
I have been unable to make it compile with ssl.
That's fine; I'm happy to go without.
I can't get it to make even when I configure with --disable-ssl

Several errors in nrpe.c are returned.

Code: Select all

./nrpe.c:103: error: syntax error before '*' token
./nrpe.c:1799: error: syntax error before '*' token
./nrpe.c: In function `complete_SSL_shutdown':
./nrpe.c:1816: error: `ssl' undeclared (first use in this function)
./nrpe.c:1816: error: (Each undeclared identifier is reported only once
./nrpe.c:1816: error: for each function it appears in.)
They're documented in a couple of forum posts from 2013 and you accepted it as a bug.
Do we have a fix yet?

Thanks,
Rick

Re: nrpe configure without ssl on Solaris 10

Posted: Tue Jun 02, 2015 2:15 pm
by lmiltchev
Can you describe all of the steps you took to compile NRPE on Solaris 10? Did you follow similar steps, as described in this guide?

Usually you see similar errors if openssl-devel package is missing. I'm not sure how this is called in the Solaris land.
They're documented in a couple of forum posts from 2013 and you accepted it as a bug.
Can you provide us with links to these forum posts?

Re: nrpe configure without ssl on Solaris 10

Posted: Tue Jun 02, 2015 2:29 pm
by grenley
Sure. Here's one: http://support.nagios.com/forum/viewtop ... =7&t=21688

I did, in fact, use that procedure (and a few others I found online). Got boatloads of ssl-related errors on the compile.
That's why I decided to go without.

Re: nrpe configure without ssl on Solaris 10

Posted: Tue Jun 02, 2015 4:30 pm
by jdalrymple
It's probably easier to just make ssl work - but if you don't want to, comment out the following lines: (I used 2.15 so my line numbers may differ slightly)

Line 103

Code: Select all

void complete_SSL_shutdown( SSL *);
Line 1799 - 1818

Code: Select all

void complete_SSL_shutdown( SSL *ssl) {

        /*
                Thanks to Jari Takkala ([email protected]) for the following information.

                We need to call SSL_shutdown() at least twice, otherwise we'll
                be left with data in the socket receive buffer, and the
                subsequent process termination will cause TCP RST's to be sent
                to the client.

                See http://bugs.ruby-lang.org/projects/ruby-trunk/repository/revisions/32219/diff
                for more information.
        */

        int x;

        for( x = 0; x < 4; x++) {
                if( SSL_shutdown( ssl)) break;
        }
}
Note that you can't comment with /* - */ unless you get rid of the existing comments in the middle. You can just delete the lines if you prefer not to comment them out.

Re: nrpe configure without ssl on Solaris 10

Posted: Tue Jun 02, 2015 6:43 pm
by grenley
That worked.
Thanks very much.

Re: nrpe configure without ssl on Solaris 10

Posted: Wed Jun 03, 2015 9:08 am
by abrist
Great! Locking thread.