SSL_ERR 5 Error -Could not complete SSL handshake with
Posted: Tue Sep 25, 2018 6:12 pm
After upgrading Nagios XI 5.4.13 --> Nagios XI 5.5.3 NRPE checks stopped working on ALL hosts(they were working fine on version 5.4.13).
NSCLIENT.ini output;
Used all the tricks i know. Anyone had the same problem and found a solution?
NSCLIENT.ini output;
Code: Select all
[/modules]
CheckExternalScripts = 1
CheckHelpers = 1
CheckEventLog = 1
CheckNSCP = 1
CheckDisk = 1
CheckSystem = 1
NRPEServer = 1
[/settings/eventlog]
buffer size = 131072
debug = false
lookup names = true
syntax =
[/settings/external scripts]
allow arguments = true
allow nasty characters = true
timeout = 60
[/settings/external scripts/wrappings]
bat = scripts\\%SCRIPT% %ARGS%
ps1 = cmd /c echo scripts\\%SCRIPT% %ARGS%; exit($lastexitcode) | powershell.exe -command -
vbs = cscript.exe //T:30 //NoLogo scripts\\lib\\wrapper.vbs %SCRIPT% %ARGS%
;exe = cmd /c %SCRIPT% %ARGS%
[/settings/external scripts/alias]
;alias_cpu = checkCPU warn=80 crit=90 time=5m time=1m time=30s
;alias_cpu_ex = checkCPU warn=$ARG1$ crit=$ARG2$ time=5m time=1m time=30s
; ...skipping lines as we do provide LOT of alias for you...
;alias_updates = check_updates -warning 0 -critical 0
;alias_volumes = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll=volumes FilterType=FIXED
;alias_volumes_loose = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll=volumes FilterType=FIXED ignore-unreadable
[/settings/external scripts/scripts]
check_exchange_queue=cmd /c echo scripts\check_exchange_queue.ps1 $ARG1$ $ARG2$ $ARG3$; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_complus=cscript.exe //T:30 //NoLogo scripts\check_complus.vbs $ARG1$
check_domain=cscript.exe //T:60 //NoLogo scripts\check_domain.vbs
check_updates=cscript.exe //T:60 //NoLogo scripts\check_windows_updates.vbs
check_pubfolders=cmd /c echo scripts\check_pubfolders.ps1; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_mbxdatabases=cmd /c echo scripts\check_mbxdatabases.ps1; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_lunusage=cmd /c echo scripts\read_lun_file.ps1 $ARG1$; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_snapshots=cmd /c echo scripts\check_snapshots.ps1 $ARG1$ $ARG2$; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_xenapp_sessions=cmd /c echo scripts\xenapp_sessions.ps1 $ARG1$ $ARG2$; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_xenapp_profit=cmd /c echo scripts\xenapp_profit.ps1; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_xenapp_desktop=cmd /c echo scripts\xenapp_desktop.ps1; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_fileshare=cmd /c echo scripts\check_cluster.ps1 $ARG1$; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_terminal_sessions=cmd /c echo scripts\terminal_sessions.ps1; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
check_citrix_licenses=cmd /c echo scripts\citrix_licenses.ps1; exit($lastexitcode) | powershell.exe -noprofile -nologo -command -
[/settings/external scripts/wrapped scripts]
;check_updates=check_updates.vbs $ARG1$ $ARG2$
[/paths]
shared-path = C:\Program Files\NSClient++
certificate-path = ${shared-path}\security
[/settings/NRPE/server]
allow nasty characters = true
allow arguments = true
allowed hosts=172.1.1.1 ( DUMMY)
allowed ciphers = ALL:!MD5:@STRENGTH
extended response = 0
port=5666
ssl options=
insecure = true
dh=${certificate-path}/nrpe_dh_512.pem
certificate=${certificate-path}/certificate.pem
certificate format=PEM