How to secure the connection between Nagios (Server - Agent) NRPE - v3 Enhanced Security 🔒

preview_player
Показать описание
NRPE - v3 Enhanced Security
Read about the it

Setup Directories:
$ cd /usr/local/nagios/etcl
$ mkdir ssl
$ chown root:nagios ssl
$ mkdir ca nagios_server_certs client_certs
$ chown root:nagios *
$ mkdir ./demoCA
$ mkdir ./demoCA/newcerts
$ cd ./demoCA
$ echo '1000' Angle brackets serial

Create Certificate Authority

NRPE Client Certificate
$ cd /usr/local/nagios/etc/ssl/client_certs/

Sign this certificate request by our CA:

Copy NRPE Client Certificates to the agent:

Or you can copy it with secure copy

In line 238 uncomment:

restart nrpe:
$ service nrpe restart

Don't forgot to uncomment the follow:
1- ssl_logging=0xff
2 ssl_client_certs=2

check_nrpe Plugin Certificate
$ cd /usr/local/nagios/etc/ssl/nagios_server_certs/
$ cd /usr/local/nagios/etc/ssl/

Using Certificates With check_nrpe Plugin

Рекомендации по теме
Комментарии
Автор

If the video didn't give you the information you looking for, please comment blow I will be glad to see comments to make improvements

cyber-tech-tips
Автор

In 2023, this is still more accurate than the official documentation.

dariuszwodarczyk
Автор

can you show one demo to enable and debug for nrpe configuration for
some time getting error ssl_cipher not shared.

vijaykumar-zsul
Автор

Can you discuss the $NRPE_SSL_OPT variable? I'm getting an error referencing that when i try and restart my NRPE service.

hnmcclain