[icinga-users] icinga-nrpe

Michael Friedrich michael.friedrich at univie.ac.at
Thu Mar 8 02:02:25 CET 2012


On 07.03.2012 23:57, Michael Friedrich wrote:
>
>>
>>
>> And the client says:
>>
>> ./check_nrpe -H ntp....  -C /usr/local/icinga/etc/client_icinga-nrpe.crt
>> -k /usr/local/icinga/etc/client_icinga-nrpe_sin.key -r
>> /usr/local/icinga/etc/client_icinga-nrpe.crt -t 20 -c check_part_root
>>
>> CHECK_NRPE: Error - Could not complete SSL handshake.
>> CHECK_NRPE: Error - Failed to verify server certificate.
>
> is the icinga user allowed to read the key/crt file?
>
> i'll look into the code to make it more verbose...

can you fetch the latest HEAD, i've added a new option to check_nrpe, 
namely -v, --verbose to increase verbosity on the long run.
furthermore, i've party rewritten the error output on ssl errors. 
probably you will now see a bit more information on failures.

https://git.icinga.org/?p=icinga-nrpe.git;a=commit;h=22f38484045b48a61bb8c03818d1d8684a231696

that being said, it would be great if you could test that.

-- 
DI (FH) Michael Friedrich

Vienna University Computer Center
Universitaetsstrasse 7 A-1010 Vienna, Austria

email:     michael.friedrich at univie.ac.at
phone:     +43 1 4277 14359
mobile:    +43 664 60277 14359
fax:	   +43 1 4277 14338
web:       http://www.univie.ac.at/zid
            http://www.aco.net

Lead Icinga Core Developer
http://www.icinga.org





More information about the icinga-users mailing list