<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=Content-Type content="text/html; charset=us-ascii"> <meta name=Generator content="Microsoft Word 12 (filtered medium)"> <title>Could not complete ssl handshake</title> <style>  </style>  </head> <body lang=EN-US link=blue vlink=purple> <div class=Section1> Harry,<o:p></o:p> There are afew thing you can check that cause this problem.<o:p></o:p> <o:p> </o:p> <![if !supportLists]>1. <![endif]>Check versions of the nrpe on both the server and the client<o:p></o:p> <![if !supportLists]>2. <![endif]>Did you install check_nrpe from source or rpm? You might want to check if one is compiled with ssl support and the other isn’t compiled for SSL support (I had that problem, server was compiled for SSL and listening for SSL connections, client wasn’t)<o:p></o:p> <![if !supportLists]>3. <![endif]>I know with RHEL (what we use here) you have to set up the SELinux permissions to allow the port through, along with editing the /etc/xinetd.d/nrpe file and send a hup to xinetd so it can talk to the server/client. Here’s a copy of my xinetd file in /etc/xinetd.d/<o:p></o:p> <![if !supportLists]>a. <![endif]># default: on<o:p></o:p> <![if !supportLists]>b. <![endif]># description: NRPE (Nagios Remote Plugin Executor)<o:p></o:p> <![if !supportLists]>c. <![endif]>service nrpe<o:p></o:p> <![if !supportLists]>d. <![endif]>{<o:p></o:p> <![if !supportLists]>e. <![endif]> flags = REUSE<o:p></o:p> <![if !supportLists]>f. <![endif]> socket_type = stream <o:p></o:p> <![if !supportLists]>g. <![endif]> port = 5666 <o:p></o:p> <![if !supportLists]>h. <![endif]> wait = no<o:p></o:p> <![if !supportLists]>i. <![endif]> user = nagios<o:p></o:p> <![if !supportLists]>j. <![endif]> group = nagios<o:p></o:p> <![if !supportLists]>k. <![endif]> server = /usr/local/nagios/bin/nrpe<o:p></o:p> <![if !supportLists]>l. <![endif]> server_args = -c /usr/local/nagios/etc/nrpe.cfg --inetd<o:p></o:p> <![if !supportLists]>m. <![endif]> log_on_failure += USERID<o:p></o:p> <![if !supportLists]>n. <![endif]> disable = no<o:p></o:p> <![if !supportLists]>o. <![endif]> only_from = NAGIOS.SERVER.IP.ADDRESS<o:p></o:p> <![if !supportLists]>p. <![endif]>}<o:p></o:p> <o:p> </o:p> <![if !supportLists]>4. <![endif]>Try running a higher debug on the server and manually run check_nrpe from the server to the client, check logs.<o:p></o:p> <o:p> </o:p> Hope this helps!<o:p></o:p> <o:p> </o:p> ~Jayson Broughton<o:p></o:p> <div> <div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'> From: Hart, Harry M. CTR USJFCOM JTCI [mailto:harry.hart.ctr@jfcom.mil] Sent: Thursday, January 08, 2009 4:37 AM To: Nagios Users Mailinglist Subject: [Nagios-users] Could not complete ssl handshake<o:p></o:p> </div> </div> <o:p> </o:p> I know I've seen this error on this forum before but can not remember what resolved the problem. I installed NRPE on a Linux system to talk to another Linux machine that is the Nagios server. I do the check_nrpe and get Could not complete SSL handshake. It works fine when I do it from the server to the remote system.<o:p></o:p> Thanks for any help on this one. <o:p></o:p> Harry <o:p></o:p> Harry M. Hart Systems integrator SAIC USJFCOM JIOC DCGS-A (757) 203-7422 DSN 668-7422 Harry.Hart@intel.jwfc.jfcom.smil.mil Harry.Hart@jwfc.ic.gov <o:p></o:p> <o:p> </o:p> </div> </body> </html> The information in this electronic mail message and any attached files is confidential and may be legally privileged. If you are not the intended recipient, delete this message and contact the sender immediately. Access to this message by anyone other than its intended recipient is unauthorized. You must not use or disseminate this information as it is proprietary property of the True companies. Communications on or through the True companies' computer systems may be monitored or recorded to secure effective system operation and for other lawful purposes. Thank you.