Tag Archives: Various Debug fixes under INux

CHECK_NRPE: Error – Could not complete SSL handshake.

Question:
[root @ mode objects] #/usr/local/nagios/libexec/172.30.71.238 check_nrpe – H – c check_load check_nrpe: Error – Could not complete the SSL handshake.

Solutions:
There are many reasons for this problem, and the aspects to consider are very broad
First of all:
Troubleshooting client:
First: VI NRPE.cfg

command[check_load]=/usr/local/nagios/libexec/check_load -w 15.10.5 -c 30.25.20
command[check_mem]=/usr/local/nagios/libexec/check_mem.pl -w 10% -c 3%
command[check_disk]=/usr/local/nagios/libexec/check_disk -w 15% -c 7% -p /
command[check_swap]=/usr/local/nagios/libexec/check_swap -w 20% -c 10%
command[check_iostat]=/usr/local/nagios/libexec/check_iostat -w 6 -c 10

Using these commands on the client side to monitor the information on the client side,

If successful, this means that there is no problem with the client configuration. Generally speaking, there is no problem here, but there is no exception. The following two are client-side
If the client problem is fixed and not fixed, the next step is to troubleshoot
Information about the server that is contained in the client configuration file
Such as: vi nrpe. CFG
Allowed_hosts = 172.30.71.20, 172.30.71.238
Add server IP, separated by English commas, no Spaces left or right of equal sign

Also, the check_NRPE plugin is not defined causing, of course, the Nagios server syntax check to error if it is not defined

Check grammar:
/etc/init.d/nagios checkconfig
Error message will be found:
Checking services…
Error: Service check Command ‘check_NRpe’ specified in Service ‘Swap Useage’ for host ‘197-etiantian-1-1’ not
defined anywhere!
Omit some.
Total Warnings: 0
Total Errors: 5
Check_nrpe’s plug-in configuration (server side) needs to be added to commands.cfg
CFG enters and shifts +g to the end to add the following.
# ‘check_nrpe’ command definition
define command{
command_name check_nrpe
command_line $USER1$/check_nrpe -H $HOSTADDRESS$ -c $ARG1$
}
At this point, re-execute the syntax check command:
Check grammar:
/etc/init.d/nagios checkconfig
Total Warnings: 0
Total Errors: 0
There are also some screening sites

1. Make sure that the versions of check_NRpe and nrPE daemon are the same.
RPMS — qa|grep openssl view
2. Verify that the check_nrpe and nrpe deamon sides enable or disable SSL support at the same time.
/ usr/local/nagios/bin/nrpe c/usr/local/nagios/etc/nrpe. The CFG – d – n
-n stands for not using SSL. To start SSL, start both sides; If you don’t start it, both sides will close; You cannot start and close at the same time
In this way