CHECK_NRPE: Error - Could not complete SSL handshake

Figueroa, Daniel DFigueroa at roseville.ca.us
Tue Nov 23 22:55:29 CET 2004


I'm in trouble now, since the Nagios box shows OpenSSL 0.9.7d 17 Mar 2004.

And my HP-UX 10.20 is not showing OpenSSL installed.

Going to www.software.hp.com to download the OpenSSL for HPUX, they have it
only for 11.X --It seems? According to their instructions for the depot install -

Following are the steps to install the OpenSSL A.00.09.07-d software:

Log in as a root user. Ensure that your system is running the HP-UX 11i v1 or 11i v2 operating system.


Download the OpenSSL software depot from http://www.software.hp.com to a /tmp directory on your system.
For the HP-UX 11i v1 operating system, the depot name is OpenSSL_A.00.09.07-d.002_HP-UX_B.11.11_32+64.depot. For the HP-UX 11i v2 operating system, the depot name is OpenSSL_A.00.09.07-d.002_HP-UX_B.11.23_IA+PA.depot.
NOTE: The suffix .002 specifies the release number and may change in future releases. 

-----Original Message-----
From: Jan Scholten [mailto:Jan.Scholten at iconz.net]
Sent: Tuesday, November 23, 2004 1:33 PM
To: Figueroa, Daniel
Cc: nagios-users at lists.sourceforge.net
Subject: Re: [Nagios-users] CHECK_NRPE: Error - Could not complete SSL
handshake


Figueroa, Daniel wrote:
> I'm unable to execute as a test from my SUSE 9.2 Nagios server -
> 
>  [root at Z3 root]# /usr/local/nagios/libexec/check_nrpe -H HPUX_srvr -c check_load
>>>I'm receiving the following error and can use your help in understanding why?
> CHECK_NRPE: Error - Could not complete SSL handshake

You need the same openssl libs (ssllib and sslib-devel. try running 
check_nrpe --help on the server and nrpe --help on the client. both need 
to show the same last line e.g.

NRPE Plugin for Nagios
Copyright (c) 1999-2003 Ethan Galstad (nagios at nagios.org)
Version: 2.0
Last Modified: 09-08-2003
License: GPL with exemptions (-l for more info)
SSL/TLS Available: Anonymous DH Mode, OpenSSL 0.9.6 or higher required

Try enabling verbose mode for nrpe (restart nrpe server afterwards) and 
check the logfiles.


> 
> I was told I have to be up-to-date on plugins, which I am -
> 
> Note: The HPUX_srvr is a HP-UX 10.20 running nrpe-1.8-B.10.20.depot.  The Nagios server is
> using the latest "Nagios Plugins HP-UX" from NagiosExchange.org, such as check_load.
> 
> On the HPUX_srvr box, I've configured the inetd.conf file to launch - 
> 
> nrpe   stream tcp nowait rose /usr/sbin/tcpd /usr/local/nagios/bin/nrpe -c /usr/ local/nagios/bin/nrpe.cfg
> 
> Doing a netstat on my HPUX box, I can see the service is listening, per /etc/service configuration.
> 
> tcp        0      0  *.nrpe                 *.*                    LISTEN
> 
> # The following are my entries in the nrpe.cfg file::  
> command[check_users]=@libexecdir@/check_users -w 5 -c 10
> command[check_load]=@libexecdir@/check_load -w 15,10,5 -c 30,25,20
> command[check_disk1]=@libexecdir@/check_disk -w 20 -c 10 -p /dev/hda1
> command[check_disk2]=@libexecdir@/check_disk -w 20 -c 10 -p /dev/hdb1
> command[check_zombie_procs]=@libexecdir@/check_procs -w 5 -c 10 -s Z
> command[check_total_procs]=@libexecdir@/check_procs -w 150 -c 200
> 
> 
>>>How does @libexecdir@ know where my check_users lives?

No idea! in my nrpe_local.cfg (Debian) i have the full pathname.. maybe 
you should change that to the full path!

Jan




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list