Page 1 of 1

Another - check_http Invalid option - SSL is not available

Posted: Wed Apr 27, 2016 3:46 pm
by MBowman325
The fix isn't directly install openssl-devel. (Well, may be, but not quite)

The OS is SLES 11 SP3

Gearing up to upgrade to Nagios 4.1.1 from 3.5 along with nagios-plugins, pnp4nagios, ect.

Stepping through the process I've updated the plugins. Sadly I didn't note the version I came from (easy enough to roll back if needed but looks like it was 1.5) but attempting to install 2.1.1. While they do install, I get indications that the development package isn't installed for openssl when I build the plugins. (I didn't notice this until all my SSL checks failed, having previously been working). The error is "configure: WARNING: OpenSSL or GnuTLS libs could not be found or were disabled" and it fails with the title.

So I've double checked what should be the devel packages for SLES and openssl and installed gnutls. I've run ./configure --with-openssl=/usr/bin/openssl

Output from zypper se openssl

i | libopenssl0_9_8 | Secure Sockets and Transport Layer Security | package
i | libopenssl0_9_8-32bit | Secure Sockets and Transport Layer Security | package
i | openssl | Secure Sockets and Transport Layer Security | package
i | openssl-certs | CA certificates for OpenSSL | package
i | openssl-debuginfo | Debug information for package openssl | package
i | openssl-debugsource | Debug sources for package openssl | package
i | openssl1-debuginfo | Debug information for package openssl1 | package
i | openssl1-debugsource | Debug sources for package openssl1 | package

So, what am I missing? And no, there is no openssl-devel package on SLES. (openssl1 is for versions >= 1.0.0)

# openssl version
OpenSSL 0.9.8j-fips 07 Jan 2009

Re: Another - check_http Invalid option - SSL is not availab

Posted: Wed Apr 27, 2016 3:57 pm
by ssax
Looks like libopenssl-devel is not installed from your zypper output.

Try installing libopenssl-devel and see if that fixes your problem.


Thank you

Re: Another - check_http Invalid option - SSL is not availab

Posted: Wed Apr 27, 2016 3:59 pm
by ssax
Sorry, I edited my post, should be libopenssl-devel.

Re: Another - check_http Invalid option - SSL is not availab

Posted: Wed Apr 27, 2016 8:21 pm
by MBowman325
Geez, it looks just like that. I swear I installed that via yast earlier too... I'll double check that.

Re: Another - check_http Invalid option - SSL is not availab

Posted: Wed Apr 27, 2016 8:28 pm
by MBowman325
There's my confusion.. I did but it's labeled as a patch.. Yast2 shouldn't let me patch it unless it's already present.. (I had a grep -v patch on the one above.)

I've typically dealt with RH derived systems, need to get more familiar with Suse and yast..

I'll look more tomorrow. I pulled a copy of check_http from 1.5 for use until this is sorted.

tfcuokopcsnag01:/usr/local/nagios/bin # zypper se openssl | grep i\ \|
i | dbgsp3-curl-openssl1-12481 | Optional update for curl-openssl1 | patch
i | dbgsp3-libopenssl-devel | Security update for OpenSSL | patch
i | dbgsp3-libopenssl1-devel | Security update for OpenSSL | patch
i | dbgsp3-openssl-12059 | Recommended update for openssl | patch
i | dbgsp3-openssl-12193 | Recommended update for openssl | patch
i | dbgsp3-openssl-12264 | Security update for openssl | patch
i | dbgsp3-openssl-12434 | Security update for openssl | patch
i | dbgsp3-openssl1-12038 | Recommended update for openssl1 | patch
i | dbgsp3-openssl1-12256 | Security update for openssl | patch
i | libopenssl0_9_8 | Secure Sockets and Transport Layer Security | package
i | libopenssl0_9_8-32bit | Secure Sockets and Transport Layer Security | package
i | openssl | Secure Sockets and Transport Layer Security | package
i | openssl-certs | CA certificates for OpenSSL | package
i | openssl-debuginfo | Debug information for package openssl | package
i | openssl-debugsource | Debug sources for package openssl | package
i | openssl1-debuginfo | Debug information for package openssl1 | package
i | openssl1-debugsource | Debug sources for package openssl1 | package
i | php5-openssl | PHP5 Extension Module | package
i | slessp3-libopenssl-devel | Security update for OpenSSL | patch
i | slessp3-openssl-12059 | Recommended update for openssl | patch
i | slessp3-openssl-12193 | Recommended update for openssl | patch
i | slessp3-openssl-12264 | Security update for openssl | patch
i | slessp3-openssl-certs | Security update for openssl-certs | patch

Re: Another - check_http Invalid option - SSL is not availab

Posted: Thu Apr 28, 2016 10:15 am
by MBowman325
Pulled down the SDK this morning and installed from RPM, all set.

i | libopenssl-devel | Include Files and Libraries mandatory for Development | package

Its always the little things, no?

Re: Another - check_http Invalid option - SSL is not availab

Posted: Thu Apr 28, 2016 1:16 pm
by tmcdonald
Yea, we're a Cent/RHEL shop here, so the SUSE/YaST hurdle tripped us a bit as well.

Are we all good to close this otherwise?

Re: Another - check_http Invalid option - SSL is not availab

Posted: Thu Apr 28, 2016 1:22 pm
by MBowman325
We're good to close this thread.