ssl handshake failure

Issue #675 resolved
Peter Daly-Dickson created an issue

Monit: 5.24.0
M/Monit: 3.7.1

Over the weekend we started to get regular Heartbeat failed events from our main server.

M_Monit_Reports___Events.png

I upgraded Monit and M/Monit to latest versions but it didn't fix the issue.

I don't know if it's related, but the Monit log shows repetitive entries like...

[UTC Oct  9 09:27:35] error    : M/Monit: error receiving data from https://[monit.macanta.org]:8443/collector -- Connection timed out
[UTC Oct  9 09:27:35] error    : M/Monit: status message to https://[monit.macanta.org]:8443/collector failed

And the M/Monit error log shows corresponding entries like...

2017-10-09 10:27:36 SSL read error [159.203.80.134] error:140940E5:SSL routines:ssl3_read_bytes:ssl handshake failure
  1. How do I fix the ssl handshake failure?
  2. If the issues aren't related, how do I troubleshoot the heartbeat failures?

Comments (3)

  1. Peter Daly-Dickson reporter

    If it helps, when I run openssl verify 20170722_combined_macanta.org.pem, to check the combined certificate used in the M/Monit server, I get...

    20170722_combined_macanta.org.pem: CN = *.macanta.org
    error 20 at 0 depth lookup:unable to get local issuer certificate
    

    However, it's exactly the same certificates as used and verified here.

  2. Tildeslash repo owner

    Please can you send the following data to support@mmonit.com?:

    1. Monit configuration file
    2. Monit log
    3. M/Monit logs/error.log and logs/mmonit.log files
    4. M/Monit configuration file (conf/server.xml)
  3. Tildeslash repo owner

    incompatible client-side OpenSSL library, solved by upgrading monit to pre-build binary with newer OpenSSL

  4. Log in to comment