Zabbix Agent

[Mun]

Hi all,

May i know whether centos 5 can works with zabbix agent 3.4?
Thanks.

[Atsushi]

You can run it.
However, encryption of communication can not be used for packages that are published.

http://repo.zabbix.com/zabbix/3.4/rhel/5/

[Mun]

Hi Atushi,

Thank you for your reply. Are you saying that encryption can't be done using zabbix agent 3.4 with centos 5?
If i want to do the encryption using pre-shared keys? it is not possible?

Thanks.

[Atsushi]

It can not be done with publicly available packages.
It is necessary to prepare a library compatible with communication encryption and recompile.

https://www.zabbix.com/documentation/3.4/manual/encryption

[kloczek]

You can run it.
However, encryption of communication can not be used for packages that are published.
http://repo.zabbix.com/zabbix/3.4/rhel/5/

Just had a look on zabbix.spec used to generate CentOS 5 packages and I found inside:

%if 0%{?rhel} >=6
build_flags="$build_flags --with-openssl"
%endif

Looks like the only reason why it has been disabled is because distribution openssl version provided by CentOS 5 is to old.
Compile and install new openssl on top of the CentOS 5 will not solve the issue because distribution libcurl uses as well uses openssl and if zabbix will be compiled with new version it will cause crash of the zabbix agent by two libraries symbols clashes.
Kind of workaround could be build openssl 1.1.x static libraries and link zabbix binaries statically with this new version of the openssl. But it is only workaround ..

PS. Using RHEL/CentOS 5 based systems longer will create in the future more similar problems.

[Mun]

Thank you kloczek, will take a look on this.