Page 1 of 1
sslv3 alert handshake failure
Posted: Wed Apr 25, 2012 10:17 am
by Flava
Hi,
I am getting the error when monitoring website with ssl certificate, I have configured the service using monitoring wizard.
3078940952:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:674:
CRITICAL - Cannot retrieve server certificate.
Re: sslv3 alert handshake failure
Posted: Wed Apr 25, 2012 11:54 am
by scottwilkerson
Could you post your service configuration for this.
Thanks
Re: sslv3 alert handshake failure
Posted: Wed Apr 25, 2012 12:44 pm
by Flava
/check_http -H <<HOSTNAME>> -C 30
CRITICAL - Cannot make SSL connection
3078002968:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure:s23_clnt.c:674:
CRITICAL - Cannot retrieve server certificate.
Re: sslv3 alert handshake failure
Posted: Wed Apr 25, 2012 2:36 pm
by scottwilkerson
Can you check to see what version of the plugins you are running
Code: Select all
cd /usr/local/nagios/libexec/
./check_http -V
If it is less than 1.4.15 you may want to install the newer plugins, I believe this was fixed in 1.4.15
You can do that by doing the following
Code: Select all
cd /tmp
wget http://assets.nagios.com/downloads/nagiosxi/agents/nagios-plugins-1.4.15.tar.gz
tar xzf nagios-plugins-1.4.15.tar.gz
cd nagios-plugins-1.4.15
time ./configure
time make clean
time make
time make install
Re: sslv3 alert handshake failure
Posted: Thu Apr 26, 2012 3:11 am
by Flava
I have now upgraded the nagios plugins, check_http is now v1.4.15-46-gefa2, however I am still getting the error, but strangely this is only affecting one website, other websites are fine. I am still getting the error.
I did checK_tcp and ports 80/443 are both responding.
Re: sslv3 alert handshake failure
Posted: Thu Apr 26, 2012 9:17 am
by scottwilkerson
Is this a standard Nagios XI install?
What type of certificates are these sites using?
If they are public facing sites, would you mind sending one of the URL's to me in a PM so I can try from a different machine to determine if the problem is machine specific.