HTTPS Access on Zabbix

[selimatmaca]

OS: Ubuntu 18.04
Zabbix: 4.0

Hi Everyone,
I installed Zabbix4.0 (From Package) on Ubuntu 18.04 by following the steps in the official download page(https://www.zabbix.com/download) and it works great. I need to make zabbix available for HTTPS access, so I checked the official documentation from the link below

https://www.zabbix.com/documentation/current/manual/installation/requirements/best_practices

I created a foldernamed private for my certs with 700 permission (/etc/apache2/ssl/private)
I copied my .crt and private key to that folder /etc/apache2/ssl/private

Enabled ssl module (a2enmod ssl)
Restarted Apache systemctl restart apache2


Editted /etc/apache2/sites-available/default-ssl.conf as follows
-------------------------------------------------------------- DocumentRoot /usr/share/zabbix
ServerName mysite.com:443
SSLCertificateFile /etc/apache2/ssl/primary.crt
SSLCertificateKeyFile /etc/apache2/ssl/private/private.key --------------------------------------------------------------
I restarted Apache again
systemctl restart apache2



To test, I changed my client computer host file and added zabbix ip with its domain name.
https://mysite.com or https://mysite.com/zabbix returns this error This site can’t provide a secure connection

mysite.com sent an invalid response.

• Try running Windows Network Diagnostics.

ERR_SSL_PROTOCOL_ERROR



On the other hand, http://mysite.com/zabbix works as HTTP.

Can you please help me to configure SSL on Zabbix. I have read and tried a lot of Apache SSL configuration howtos from internet. They didn't work either.

[selimatmaca]

Solved. There was a problem with my crt and private key files. I re-converted my primary.crt and private.key file from pfx file by using OpenSSL with the commands below and problem is solved.

Run the following command to export the private key: (This will generate key.pem)

openssl pkcs12 -in certname.pfx -nocerts -out key.pem –nodes

Run the following command to remove the passphrase from the private key: (This will generate server.key)

openssl rsa -in key.pem -out server.key

Run to convert certificate file pfx to crt (This will generate certificate.crt)

openssl pkcs12 -in certname.pfx -clcerts -nokeys -out certificate.crt

[prajaktas22]

Hello,

I have one question related to this. May I know what ServerName mysite.com:443 we have to define here. we already have our ssl certificates and do we need to create new for zabbix frontend installations?