The Agents in question sent encrypted (i was watching with tcpdump).
probably check_mk master wasnt detecting that it is encrypted correctly in some cases.
or i shouldnt have also set livestatus encryption to optional.
- After setting Encryption to enforced for Agent Communication it was working correctly for most of the systems.

Some Stretch system with openssl 1.1 still made problems.
The Digest has to be set to "-md md5" in the check_mk_agent for it to work.
was searching a bit for that one ;)

Andreas Döhler <>
9. August 2017 um 22:10
Hi Robert,

i had only some info from the german mailing list that there is some problem with agents sending unencrypted traffic.
If all agents send encrypted it should be no problem.


Robert Bartl <>
9. August 2017 um 15:59

i've setup encryption in all check_mk_agents via /etc/check_mk/encryption in a 1.4.0p9-1 Version. (it should accept unencrypted & encrypted) after changing the setting in WATO most of the Hosts started flapping and reporting "Missing agent sections" for all services. (it does this for encrypted and not yet encrypted agents)

How would i be able to debug this ?
Network connection seems OK.


DI (FH) Robert Bartl
EDV Bartl
Josef Krainer Strasse 24, 8141 Unterpremstätten
T: +43 (650) 8806806
F: +43 (720) 502842
checkmk-en mailing list

Reply via email to