omueller

omueller / check_nrpe_openssl098.txt

Last active March 2, 2022 19:34

check_nrpe from new server (FreeBSD 12.3) to very old NRPE hosts

	Situation:

	FreeBSD 12.3 upgraded host with nagios 4.4.6 and nrpe 3.2.1. Checks to old NRPE2-based hosts (with SSL) are failing with:

	[nagios@nagios /usr/local/libexec/nagios]$ ./check_nrpe3 -H 1.2.3.4
	CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 1.2.3.4: 1

	Tried all possible variants of options, with -2, -D, etc, like "-L 'DEFAULT:!DH' -S SSLv3 -D 0", no luck.
	Recompile nrpe3 or nrpe4