NRPE Error: Could not complete SSL handshake

[SoporteGSID]

Hi!

Another issue migrating from Nagios Core 3.2.3 to Nagios XI 5.8.2. All the checks with check_nrpe are failing with error "NRPE Error: Could not complete SSL handshake" (both in windows and linux machines):

Linux machines
Version of nrpe (running without xinetd): NRPE v2.12

Windows machines
Version of nrpe: NRPE 0.39.327

I have checked this post (same simptoms), trying with -2, -3 and -n options but same error. Is there another solution instead of upgrading all our clients (more than 800 including windows and linux)?

[benjaminsmith]

Hi,

If you're not planing to upgrade the NRPE agent on the remote systems, then you'll want to add the -2 flag to the check_nrpe command in Nagios XI. This can be done in the CCM by going to Configure > Core Config Manager > Commands.

See: https://support.nagios.com/kb/article/n ... s-786.html

The SSL error is most likely the result of a changing IP address. Check the following file on the remotes systems

Code: Select all

/usr/local/nagios/etc/nrpe.cfg

and make sure the allowed host option is set to the IP address of the XI server. More details and instructions are available in the following guide.

NRPE - CHECK_NRPE: Error - Could Not Complete SSL Handshake

[SoporteGSID]

Hi Benjamin, thank you for your reply.

The -2 parameter doesn't work unless we add the following line to the nrpe.cfg:

Code: Select all

verify mode = none

Once added the line, the check is working again but we're going to update all of our clients after all

[dchurch]

Glad to hear you resolved it! Let us know if you have any related questions or if we're okay to lock this up and mark it as resolved.

[SoporteGSID]

Please, mark this topic as resolved.

[scottwilkerson]

Please, mark this topic as resolved.

Locking thread