Page 1 of 1

CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake

Posted: Thu Jan 16, 2025 2:42 pm
by JohnFLi
This is not your regular fix for this issue.
Everythign was working fine and dandy.
I backed up the server, and migrated to another server (newer OS)
MOST of the checks work just fine and expected.
The machine migrated to has the same name as original, same IP address as well.

these checks worked fine on the original machine (centOS 7) the new machine is CentOS 9
Version of Nagios is the same (2024R1.1.5), which is why i need to migrate to a newer OS so I can upgrade Nagios....but I woul rather get this mart fixed first.

I have also uninstalled and reinstalled the NCPA client on the target machine. (3.0.0)

The NRPE Plugin for both machines is the same (4.1.0)

Any ideas?

Re: CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake

Posted: Thu Jan 16, 2025 5:55 pm
by jmichaelson
Hi @JohnFLi

Check out this post and the document it links to:

viewtopic.php?p=359591#p359591

Don't hesitate to contact us if that doesn't resolve your issue.

Re: CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake

Posted: Fri Jan 17, 2025 1:35 am
by kg2857
Look at the -2 option in the -h argument or search the error message.

Re: CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake

Posted: Fri Jan 17, 2025 9:46 am
by JohnFLi
Post by kg2857 ยป Thu Jan 16, 2025 11:35 pm

Look at the -2 option in the -h argument or search the error message.
I meant to include the command I was using, thank you for pointing it out.

The command I am using is

Code: Select all

/usr/local/nagios/libexec/check_nrpe -2 -H <HostName>

Result:

CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with <ip address>: 1

Re: CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake

Posted: Thu Jan 23, 2025 4:41 pm
by bbahn
@JohnFli

This will guide you on how to configure a 2048-bit dh key, which should resolve your SSL issues:
OpenSSL causes issue with check_nrpe plugin with NSClient++