<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Building NRPE on Solaris 10 with SSL Support</title>
	<atom:link href="http://lonesysadmin.net/2008/06/11/building-nrpe-on-solaris-10-with-ssl-support/feed" rel="self" type="application/rss+xml" />
	<link>http://lonesysadmin.net/2008/06/11/building-nrpe-on-solaris-10-with-ssl-support/</link>
	<description>im in ur data centrz patchin ur serverz</description>
	<pubDate>Thu, 20 Nov 2008 09:14:53 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.3</generator>
		<item>
		<title>By: gordon</title>
		<link>http://lonesysadmin.net/2008/06/11/building-nrpe-on-solaris-10-with-ssl-support/#comment-75062</link>
		<dc:creator>gordon</dc:creator>
		<pubDate>Mon, 15 Sep 2008 10:46:29 +0000</pubDate>
		<guid isPermaLink="false">http://lonesysadmin.net/?p=1299#comment-75062</guid>
		<description>Thanks Bob, your solution help me get following command executed correctly

[root@solaris10 ~]# /usr/local/nagios/libexec/check_nrpe -H localhost
NRPE v2.12

But, when I run check_nrpe from nagios server (RHEL5) to this remote solaris 10 server, it still failed.


[root@rhel5 ~]#  /usr/local/nagios/libexec/check_nrpe -H 192.168.78.104
CHECK_NRPE: Error - Could not complete SSL handshake.


Thanks a lot for your solution, would you please have me have a look into this error!

To Ton, I didn't understand what you stated, would you please give more detail or description, sorry!</description>
		<content:encoded><![CDATA[<p>Thanks Bob, your solution help me get following command executed correctly</p>
<p>[root@solaris10 ~]# /usr/local/nagios/libexec/check_nrpe -H localhost<br />
NRPE v2.12</p>
<p>But, when I run check_nrpe from nagios server (RHEL5) to this remote solaris 10 server, it still failed.</p>
<p>[root@rhel5 ~]#  /usr/local/nagios/libexec/check_nrpe -H 192.168.78.104<br />
CHECK_NRPE: Error - Could not complete SSL handshake.</p>
<p>Thanks a lot for your solution, would you please have me have a look into this error!</p>
<p>To Ton, I didn&#8217;t understand what you stated, would you please give more detail or description, sorry!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ton Voon</title>
		<link>http://lonesysadmin.net/2008/06/11/building-nrpe-on-solaris-10-with-ssl-support/#comment-74849</link>
		<dc:creator>Ton Voon</dc:creator>
		<pubDate>Wed, 06 Aug 2008 09:43:58 +0000</pubDate>
		<guid isPermaLink="false">http://lonesysadmin.net/?p=1299#comment-74849</guid>
		<description>Thanks for the advice!

We found we also needed to apply this patch:

--- nrpe-2.12.original//src/check_nrpe.c        Wed Aug  6 11:16:13 2008
+++ nrpe-2.12/src/check_nrpe.c  Wed Aug  6 11:20:15 2008
@@ -149,7 +149,8 @@
        /* do SSL handshake */
        if(result==STATE_OK &#38;&#38; use_ssl==TRUE){
                if((ssl=SSL_new(ctx))!=NULL){
-                       SSL_CTX_set_cipher_list(ctx,"ADH");
+                       /* Altinity patch: Remove AES256 to remove dependency on SUNWcry(r) packages */
+                       SSL_CTX_set_cipher_list(ctx,"ADH:-ADH-AES256-SHA");
                        SSL_set_fd(ssl,sd);
                        if((rc=SSL_connect(ssl))!=1){
                                printf("CHECK_NRPE: Error - Could not complete SSL handshake.\n");

... to NRPE daemon so that other Nagios servers which support AES256 could still communicate over SSL to NRPE on a Solaris host.</description>
		<content:encoded><![CDATA[<p>Thanks for the advice!</p>
<p>We found we also needed to apply this patch:</p>
<p>&#8212; nrpe-2.12.original//src/check_nrpe.c        Wed Aug  6 11:16:13 2008<br />
+++ nrpe-2.12/src/check_nrpe.c  Wed Aug  6 11:20:15 2008<br />
@@ -149,7 +149,8 @@<br />
        /* do SSL handshake */<br />
        if(result==STATE_OK &amp;&amp; use_ssl==TRUE){<br />
                if((ssl=SSL_new(ctx))!=NULL){<br />
-                       SSL_CTX_set_cipher_list(ctx,&#8221;ADH&#8221;);<br />
+                       /* Altinity patch: Remove AES256 to remove dependency on SUNWcry(r) packages */<br />
+                       SSL_CTX_set_cipher_list(ctx,&#8221;ADH:-ADH-AES256-SHA&#8221;);<br />
                        SSL_set_fd(ssl,sd);<br />
                        if((rc=SSL_connect(ssl))!=1){<br />
                                printf(&#8221;CHECK_NRPE: Error - Could not complete SSL handshake.\n&#8221;);</p>
<p>&#8230; to NRPE daemon so that other Nagios servers which support AES256 could still communicate over SSL to NRPE on a Solaris host.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
