Objective

The objective is to presenting the solution for the following error “Could not complete SSL handshake” or “Error receiving data from daemon” that occurs when you run the query from the OpMon.

Symptom

When running the query from the OpMon, occur the following errors “Could not complete SSL handshake” or ”Error receiving data from daemon“.

[root@opmon]# /usr/local/opmon/libexec/check_nrpe -H 192.168.10.146
CHECK_NRPE: Error - Could not complete SSL handshake.

or

CHECK_NRPE: Error receiving data from daemon.

Checking the log, the following message appears “FAIL: nrpe address 192.168.10.2 from =192.168.10.2″

[root@localhost]# tail -f /var/log/messages
Dec 6 11:49:52 localhost xinetd[19455]: FAILS: nrpe address from=192.168.10.2

or

Dec 6 11:49:52 localhost nrpe[19482]:Error: Could not complete SSL handshake.

Solution

In this case is there a mismatch due to SSL, or the host agent is not released to respond to the OpMon. To solve these problems, run the same command,without the option -n

[root@opmon]# /usr/local/opmon/libexec/check_nrpe -H IP_DO_SERVIDOR
NRPE v2.13

If the problem persists, run the following procedure

Edit the file /etc/xinet.d/nrpe and add the OpMon IP (or Firewall if there is one) in the lineonly_from

[root@localhost]# vim /etc/xinet.d/nrpe
only_from  = 127.0.0.1 192.168.10.2

Finally, restart xinetd

[root@localhost libexec]# service xinetd restart
Stopping xinetd:       [OK]
Starting xinetd:       [OK]