HTTPS web monitor using only RC4 ciphers

[allenangel82]

Where can I make a change so that my HTTPS web monitors will use only RC4 ciphers to make the SSL connection? Is there a configuration file that I can edit? I'm a newbie at Zabbix and novice with Linux, so any help or pointers would be greatly appreciated.

I'm running Ubuntu 14.04 and Zabbix 2.2 installed from package.

[blagoycho]

Same here

Hi,

I have the same problem - versions of Ubuntu and Zabbix are the same. However I cannot find where to set the acceptable ciphers.
The best possible place so far appear to be the variable in web scenario but there is no reference how and what to set?

Look forward to find a way to set cipher(s)

[jan.garaj]

Zabbix doesn't provide config option to setup cipher for SSL connection. IMHO it's selected automatically by used SSL library (OpenSSL , NSS).

But you can still edit source code of Zabbix webtest
https://www.zabbix.org/websvn/wsvn/z...ler/httptest.c (lines 388-397)
and you can add CURLOPT_SSL_CIPHER_LIST config for used libcurl there:

http://curl.haxx.se/libcurl/c/CURLOPT_SSL_CIPHER_LIST.html

And then just compile this updated zabbix source code.