Page 1 of 1

Nagios monitoring ok but SSL Handshake error

Posted: Thu Jul 07, 2016 11:45 pm
by jim
Good Folks,

I have a weird situation here. My remote linux server is nice monitored by Nagios but when I try to run check_nrpe -H <Nagios Server> I get SSL Handshake error. I don't the same error from Nagios server.

Code: Select all

[root@agent1 ~]# /usr/local/nagios/libexec/check_nrpe -H master
CHECK_NRPE: Error - Could not complete SSL handshake.

The error message in /var/log/messages file of Nagios Server is Jul  8 21:43:57 puppet nrpe[8648]: Host 192.168.1.3 is not allowed to talk to us!
When in fact Nagio server IP is defined in allowed_hots at /etc/xinetd.d/nrpe file on Linux remote server(agent1)
[root@agent1 ~]# 
[root@master ~]# /usr/local/nagios/libexec/check_nrpe -H agent1
NRPE v2.15
[root@master ~]# 
Any idea how to resolve it?

Re: Nagios monitoring ok but SSL Handshake error

Posted: Fri Jul 08, 2016 9:30 am
by mcapra
So you are, from the remote server (agent1), trying to run check_nrpe on the Nagios server (master)? I would make sure that both server's have eachother in the allowed_hosts definition.

Refer to Section III of this document (and this document in general for NRPE issues):
https://assets.nagios.com/downloads/nag ... utions.pdf

What are you trying to accomplish by doing this?

Re: Nagios monitoring ok but SSL Handshake error

Posted: Sat Jul 09, 2016 1:42 am
by jim
What are you trying to accomplish by doing this?
Don't we check that nrpe is working properly running

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H <remote server hostname or IP>
I have never seen/heard that remote serve IP should be in nrpe.cfg file, by adding it also I get same error.

Re: Nagios monitoring ok but SSL Handshake error

Posted: Sat Jul 09, 2016 4:21 am
by jim
Yes, I do agree with you that we need to have IP's for allowed_host however I find that it works only when you compile with ssl headers like below.

Code: Select all

./configure --enable-ssl
It is given in the link you mentioned so all good :)

Re: Nagios monitoring ok but SSL Handshake error

Posted: Mon Jul 11, 2016 9:04 am
by mcapra
Thanks for sharing your solution! Is it alright if I lock this thread and mark the issue as resolved?

Re: Nagios monitoring ok but SSL Handshake error

Posted: Mon Jul 11, 2016 5:51 pm
by jim
Yes please go ahead :)