Page 1 of 1

NRPE Error: Could not complete SSL handshake

Posted: Tue Apr 06, 2021 6:10 am
by SoporteGSID
Hi!

Another issue migrating from Nagios Core 3.2.3 to Nagios XI 5.8.2. All the checks with check_nrpe are failing with error "NRPE Error: Could not complete SSL handshake" (both in windows and linux machines):

Linux machines
Version of nrpe (running without xinetd): NRPE v2.12

Windows machines
Version of nrpe: NRPE 0.39.327

I have checked this post (same simptoms), trying with -2, -3 and -n options but same error. Is there another solution instead of upgrading all our clients (more than 800 including windows and linux)?

Re: NRPE Error: Could not complete SSL handshake

Posted: Tue Apr 06, 2021 2:13 pm
by benjaminsmith
Hi,

If you're not planing to upgrade the NRPE agent on the remote systems, then you'll want to add the -2 flag to the check_nrpe command in Nagios XI. This can be done in the CCM by going to Configure > Core Config Manager > Commands.

See: https://support.nagios.com/kb/article/n ... s-786.html

The SSL error is most likely the result of a changing IP address. Check the following file on the remotes systems

Code: Select all

/usr/local/nagios/etc/nrpe.cfg
and make sure the allowed host option is set to the IP address of the XI server. More details and instructions are available in the following guide.

NRPE - CHECK_NRPE: Error - Could Not Complete SSL Handshake

Re: NRPE Error: Could not complete SSL handshake

Posted: Thu Apr 08, 2021 1:08 am
by SoporteGSID
Hi Benjamin, thank you for your reply.

The -2 parameter doesn't work unless we add the following line to the nrpe.cfg:

Code: Select all

verify mode = none
Once added the line, the check is working again but we're going to update all of our clients after all :cry:

Re: NRPE Error: Could not complete SSL handshake

Posted: Thu Apr 08, 2021 2:58 pm
by dchurch
Glad to hear you resolved it! Let us know if you have any related questions or if we're okay to lock this up and mark it as resolved.

Re: NRPE Error: Could not complete SSL handshake

Posted: Fri Apr 09, 2021 12:55 am
by SoporteGSID
Please, mark this topic as resolved.

Re: NRPE Error: Could not complete SSL handshake

Posted: Fri Apr 09, 2021 6:56 am
by scottwilkerson
SoporteGSID wrote:Please, mark this topic as resolved.
Locking thread