Page 1 of 1

sslv3 alert handshake failure only in webinterface

Posted: Fri Aug 23, 2019 4:22 am
by GET65IT
Hello,

we receive with the check_http command this error

Code: Select all

SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:s3_pkt.c:1487:SSL alert number 40
only in nagios webinterface!

But from cmd line it's works without errors. This is a odd behavior.

Code: Select all

define service {
    use                 generic-service
    host_name           TEST
    service_description TEST URL
    check_command       check_http! -H our-server -S --sni -u /path/to/page -e 200,301
    check_interval      5
}
Result from cmd line

Code: Select all

$ check_http -H our-server -S --sni -u /path/to/page -e 200,301

HTTP OK: Status line output matched "200,301" - HTTP/1.1 200 OK - 70296 bytes in 2.795 second response time |time=2.795303s;;;0.000000 size=70296B;;;0
The result of the web interface is attached as a screenshot. We can't explain this behavior.

Re: sslv3 alert handshake failure only in webinterface

Posted: Fri Aug 23, 2019 10:40 am
by bheden
That error is indicative of the hostname not being properly sent to download the right certificate, if I recall correctly.

Can you increase the verbosity of the check definition? -vvv And then provide the output?

Re: sslv3 alert handshake failure only in webinterface

Posted: Mon Aug 26, 2019 2:44 am
by GET65IT
Hi,

I found the problem myself shortly after the post. Someone else had the problem before.

https://support.nagios.com/forum/viewto ... 627#p40682

Re: sslv3 alert handshake failure only in webinterface

Posted: Mon Aug 26, 2019 9:51 am
by mbellerue
Excellent! Thank you for linking to the solution! I will go ahead and close this thread.