Zabbix Documentation 3.0

2.23.04.0 (current)In development:4.2 (devel)Unsupported:1.82.02.43.23.4

User Tools

Site Tools


manual:encryption:troubleshooting:psk_problems

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
manual:encryption:troubleshooting:psk_problems [2018/08/09 08:07]
martins-v autonumbering removal
manual:encryption:troubleshooting:psk_problems [2018/11/28 08:41] (current)
martins-v internal linking to size limit info
Line 26: Line 26:
   ...failed to accept an incoming connection: from xx.xx.xx.xx:​ TLS handshake returned error code 1: file s3_pkt.c line 532: error:​1408F119:​SSL routines:​SSL3_GET_RECORD:​decryption failed or bad record mac: TLS write fatal alert "bad record mac"   ...failed to accept an incoming connection: from xx.xx.xx.xx:​ TLS handshake returned error code 1: file s3_pkt.c line 532: error:​1408F119:​SSL routines:​SSL3_GET_RECORD:​decryption failed or bad record mac: TLS write fatal alert "bad record mac"
  
 +=== Too long PSK value used with OpenSSL 1.1.1 ===
 +
 +In connecting-side log:
 +  ...OpenSSL library (version OpenSSL 1.1.1  11 Sep 2018) initialized
 +  ...
 +  ...In zbx_tls_connect():​ psk_identity:"​PSK 1"
 +  ...zbx_psk_client_cb() requested PSK identity "PSK 1"
 +  ...End of zbx_tls_connect():​FAIL error:'​SSL_connect() set result code to SSL_ERROR_SSL:​ file ssl\statem\extensions_clnt.c line 801: error:​14212044:​SSL routines:​tls_construct_ctos_early_data:​internal error: TLS write fatal alert "​internal error"'​
 +  ​
 +In accepting-side log:
 +  ...Message from 123.123.123.123 is missing header. Message ignored.
 +
 +See also: [[:​manual/​encryption/​using_pre_shared_keys#​size_limits|Value size limits]]