Dear Whit, This URL might come in handy. It's where I keep my notes on issues I have with NRPE on various platforms. It's not very extensive yet but shows a number of possible solutions to the SSL handshake deal.
http://handyswitches.org/index.php?title=nrpe#TROUBLESHOOTING Regards, Richard Remington Unix Administrator Whit Blauvelt wrote: > Hi, > > This is with nrpe-2.12, built from tar: > > On the remote host: > > daemon.log:Jul 28 13:22:42 system2 nrpe[7460]: Starting up daemon > daemon.log:Jul 28 13:22:42 system2 nrpe[7460]: Listening for connections on > port 5666 > daemon.log:Jul 28 13:22:42 system2 nrpe[7460]: Allowing connections from: > 127.0.0.1, 192.168.250.1 > daemon.log:Jul 28 13:22:52 system2 nrpe[7470]: Host 192.168.250.1 is not > allowed to talk to us! > daemon.log:Jul 28 13:27:46 system2 nrpe[8013]: Host 192.168.250.1 is not > allowed to talk to us! > > On the main nagios system: > > r...@system1:/opt/nagios/plugins# ./check_nrpe -H 192.168.250.2 -c check_swap > CHECK_NRPE: Error - Could not complete SSL handshake. > > r...@system1:/opt/nagios/plugins# ./check_nrpe -n -H 192.168.250.2 -c > check_swap > CHECK_NRPE: Error receiving data from daemon. > > I'm see other discussions here that suggest there could have been a > compile-time problem with the SSL libraries. I'll check that. Even if turns > out so, should that effect connecting without SSL, as in the last example? > These two boxes are connected by direct cable, no need to encrypt. And > they're exchanging other traffic constantly on this link, so it's known > good. > > What's with the contradiction between "Allowing connections from: 127.0.0.1, > 192.168.250.1" and "Host 192.168.250.1 is not allowed to talk to us!"? It > seems on the surface like that second message is wrong - that host > 192.168.250.1 obviously _is_ allowed to "talk to us," but the transaction's > failing on another level. Is there a bug here in the choice of error message > to present? > > Thanks, > Whit > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Nagios-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/nagios-users > ::: Please include Nagios version, plugin version (-v) and OS when reporting > any issue. > ::: Messages without supporting info will risk being sent to /dev/null > > ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Nagios-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
