CHECK_NRPE: Error – Could not complete SSL handshake

If you have this error “CHECK_NRPE: Error – Could not complete SSL handshake” while configuring Nagios or Centreon, make sure that your (Nagios|Centreon) poller IP address is allowed in the remote monitored nrpe server configuration file. Just add the IP address :

Debian : cat  /etc/nagios/nrpe.cfg

allowed_hosts=your_ip_here

then, reload the nrpe server configuration file :

root@localhost:~#/etc/init.d/nagios-nrpe-server reload

RedHat : cat  /etc/nagios/nrpe.cfg

allowed_hosts=your_ip_here

Then, restart the nrpe server configuration file (no option for reloading) :

root@localhost:~#service nrpe restart

Advertisements

One thought on “CHECK_NRPE: Error – Could not complete SSL handshake

  1. I had the same problem and the only suggestions I could find talked about making sure the nrpe agent was configured to accept requests from the server.

    In my case the nagios server is on a Windows server and the administrator had it set up to NOT use SSL. I asked him to confirm it was using SSL, because I was able to capture network traffic and see the service calls being made in plain text. He didn’t know how to do that, but when I disabled SSL for nrpe it all worked, so I think my hunch was right.

    Moral of the story – the message indicates ONE of the ends of the connection has an SSL problem. Check both!

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s