Ad Widget

Collapse

Zabbix agent and proxy encryption

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • ixobic
    Junior Member
    • Oct 2021
    • 1

    #1

    Zabbix agent and proxy encryption

    Hello,
    I am deploying a monitoring infrastructure with a central zabbix server and multiple zabbix proxies that handles off-site servers. I have configured the proxies to be encrypted (psk). When I clean install a zabbix agent behind one of those proxies without any encryption, it works correctly, however when configuring it to use pre-shared keys I get those messages:
    - From the agent:
    Code:
    active check configuration update from [<ip_proxy>:10051] started to fail (TCP successful, cannot establish TLS to [[<ip_proxy>]:10051]: SSL_connect() set result code to SSL_ERROR_SSL: file ../ssl/record/rec_layer_s3.c line 1544: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure: SSL alert number 40: TLS read fatal alert "handshake failure")
    - From the proxy:
    Code:
    cannot find requested PSK identity "<some_key>"
    failed to accept an incoming connection: from <ip_agent>: TLS handshake set result code to 1: file ../ssl/t1_lib.c line 2750: error:14201076:SSL routines:tls_choose_sigalg:no suitable signature algorithm: TLS write fatal alert "handshake failure"
    - Nothing from the server ('ZBX' icon stays grey)

    Strangely, when configuring a agent from windows (zabbix agent 2), with pre-shared keys, it works fine.
    Is there something i'm doing wrong during installation that causes this behaviour, or is there a specific setting I'm missing ?

    Thanks,
    Regards.
  • niveastn
    Member
    • Oct 2021
    • 82

    #2
    Hey there!

    What is the version of you zabbix servers?
    And how are your agent settings?

    Comment

    Working...