CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake

[JohnFLi]

This is not your regular fix for this issue.
Everythign was working fine and dandy.
I backed up the server, and migrated to another server (newer OS)
MOST of the checks work just fine and expected.
The machine migrated to has the same name as original, same IP address as well.

these checks worked fine on the original machine (centOS 7) the new machine is CentOS 9
Version of Nagios is the same (2024R1.1.5), which is why i need to migrate to a newer OS so I can upgrade Nagios....but I woul rather get this mart fixed first.

I have also uninstalled and reinstalled the NCPA client on the target machine. (3.0.0)

The NRPE Plugin for both machines is the same (4.1.0)

Any ideas?

[jmichaelson]

Hi @JohnFLi

Check out this post and the document it links to:

viewtopic.php?p=359591#p359591

Don't hesitate to contact us if that doesn't resolve your issue.

[kg2857]

Look at the -2 option in the -h argument or search the error message.

[JohnFLi]

Post by kg2857 » Thu Jan 16, 2025 11:35 pm

Look at the -2 option in the -h argument or search the error message.

I meant to include the command I was using, thank you for pointing it out.

The command I am using is

Code: Select all

/usr/local/nagios/libexec/check_nrpe -2 -H <HostName>

Result:

CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with <ip address>: 1

[bbahn]

@JohnFli

This will guide you on how to configure a 2048-bit dh key, which should resolve your SSL issues:
OpenSSL causes issue with check_nrpe plugin with NSClient++