NRPE: Could not complete SSL handshake

[Andy Shellam]

Hi,

I'm running NRPE 2.7.1 on a Fedora 6 machine.
My Nagios 2.8 server is talking to it fine, and all NRPE checks are 
succeeding.

However, every 5 minutes I'm getting the following error logged in my 
/var/log/messages log on the FC6 machine:

Apr  8 08:33:58 acs20aa6 nrpe[23649]: Error: Could not complete SSL 
handshake. 5

Yet when I look in my /var/log/secure log (which stores every command 
run through sudo from NRPE), I cannot match the SSL handshake error to a 
time of a check attempt from my Nagios server, e.g. for the above error:

Apr  8 08:31:10 acs20aa6 sudo:   nagios : TTY=unknown ; PWD=/ ; 
USER=root ; COMMAND=/usr/local/nagios/libexec/check_uptime
Apr  8 08:31:10 acs20aa6 sudo:   nagios : TTY=unknown ; PWD=/ ; 
USER=root ; COMMAND=/usr/local/nagios/libexec/check_dns -H 
portland-1.andyshellam.eu -a 89.200.137.203 -t 5 -w 3 -c 5
Apr  8 08:31:10 acs20aa6 sudo:   nagios : TTY=unknown ; PWD=/ ; 
USER=root ; COMMAND=/usr/local/nagios/libexec/check_load -w 5,4,3 -c 10,8,6
Apr  8 08:35:18 acs20aa6 sudo:   nagios : TTY=unknown ; PWD=/ ; 
USER=root ; COMMAND=/usr/local/nagios/libexec/check_disk -w 25% -c 10% -p /
Apr  8 08:35:19 acs20aa6 sudo:   nagios : TTY=unknown ; PWD=/ ; 
USER=root ; COMMAND=/usr/local/nagios/libexec/check_procs -w 1:1 -c 1:1 
-C named
Apr  8 08:35:19 acs20aa6 sudo:   nagios : TTY=unknown ; PWD=/ ; 
USER=root ; COMMAND=/usr/local/nagios/libexec/check_swap -w 25% -c 10%
Apr  8 08:35:32 acs20aa6 sudo:   nagios : TTY=unknown ; PWD=/ ; 
USER=root ; COMMAND=/usr/local/nagios/libexec/check_procs -w 150 -c 200

As you can see, there is no check being carried out at 8:33 (the time of 
the SSL error.)  Plus there are no failing NRPE checks on the Nagios 
server for this host.

I'm baffled.

I've just checked on 2 of my other machines, which are running NRPE 
2.7.1 on Fedora 4 and FreeBSD 6.1, and they both have the same problem - 
a reported SSL handshake error when no checks were being carried out.

Now, on the FreeBSD machine, it has a firewall only letting my Nagios 
server talk to port 5666, so I know it's not possible for it to be 
another Nagios machine somewhere.

Any ideas what could be causing NRPE to fail a connection attempt every 
5 minutes, when it doesn't appear to be Nagios talking to it?

Thanks

Andy

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null