Zabbix Documentation 4.2

2.23.04.04.2 (current)In development:4.4 (devel)Unsupported:1.82.02.43.23.4

User Tools

Site Tools


manual:encryption

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
manual:encryption [2018/10/16 10:56]
andris [Compiling Zabbix with encryption support] removed note that OpenSSL 1.1.1 is not supported
manual:encryption [2019/04/08 08:39] (current)
martins-v adding 'libressl' support
Line 24: Line 24:
 === Compiling Zabbix with encryption support === === Compiling Zabbix with encryption support ===
  
-To support encryption Zabbix must be compiled and linked with one of three crypto libraries: +To support encryption Zabbix must be compiled and linked with one of four crypto libraries:
-  * //mbed TLS// (formerly //​PolarSSL//​)(version 1.3.9 and later 1.3.x). //mbed TLS// 2.x is not currently supported, it is not a drop-in replacement for 1.3 branch, Zabbix will not compile with //mbed TLS// 2.x.+
   * //GnuTLS// (from version 3.1.18)   * //GnuTLS// (from version 3.1.18)
-  * //OpenSSL// (from version 1.0.1).+  * //OpenSSL// (versions 1.0.1, 1.0.2, 1.1.0). //OpenSSL// 1.1.1 is supported ​from Zabbix versions 3.0.23, 3.4.15, 4.0.1. 
 +  * //​LibreSSL//​ (tested with versions 2.7.4, 2.8.2). //​LibreSSL//​ 2.6.x is not supported. //​LibreSSL//​ is supported as a compatible replacement of //​OpenSSL//,​ the new ''​tls_*()''​ //​LibreSSL//​-specific API functions are not used. Zabbix components compiled with //​LibreSSL//​ will not be able to use PSK, only certificates can be used. 
 +  * //mbed TLS// (formerly //​PolarSSL//​)(version 1.3.9 and later 1.3.x). //mbed TLS// 2.x is not currently supported, it is not a drop-in replacement for 1.3 branch, Zabbix will not compile with //mbed TLS// 2.x.
  
 The library is selected by specifying an option to "​configure"​ script: The library is selected by specifying an option to "​configure"​ script:
-  * ''<​nowiki>​--with-mbedtls[=DIR]</​nowiki>''​ 
   * ''<​nowiki>​--with-gnutls[=DIR]</​nowiki>''​   * ''<​nowiki>​--with-gnutls[=DIR]</​nowiki>''​
-  * ''<​nowiki>​--with-openssl[=DIR]</​nowiki>''​+  * ''<​nowiki>​--with-openssl[=DIR]</​nowiki>''​ (also used for //​LibreSSL//​) 
 +  * ''<​nowiki>​--with-mbedtls[=DIR]</​nowiki>''​
  
 For example, to configure the sources for server and agent with //OpenSSL// you may use something like:\\ For example, to configure the sources for server and agent with //OpenSSL// you may use something like:\\