PSK encryption

[Mr.Pelovski]

Hello,

I'm trying to use psk encryption on agent with active checks on Windows 7, but wont work, don't know why.

Here's my agent conf :

TLSPSKFile=C:\zabbix\zabbix.txt
TLSPSKIdentity=psk001
TLSConnect=psk

When i remove psk option from config file works fine ...

Here is agent log:

4008:20160817:100235.765 using configuration file: C:\zabbix\zabbix_agentd.win.conf
4008:20160817:100235.766 agent #0 started [main process]
4820:20160817:100235.766 agent #1 started [collector]
5060:20160817:100235.766 agent #2 started [active checks #1]
5060:20160817:100235.769 no active checks on server [10.29.0.40:10051]: connection of type "unencrypted" is not allowed for host "IDX-INVENTORY"
4520:20160817:100251.897 Zabbix Agent stopped. Zabbix 3.0.0 (revision 58455).

PSK File :

852db2dca368484050c9b15810e3453f49cc8086b8dd2b04a1 1af4de3f74c42f

When try to start zabbix_agent service receive :



Where am I wrong ?

[glebs.ivanovskis]

First of all, is your agent compiled with TLS support? (It usually prints YES or NO in the log on start.)

[Mr.Pelovski]

First of all, is your agent compiled with TLS support? (It usually prints YES or NO in the log on start.)

When i enable TLS service wont start, when is disable is running.

[glebs.ivanovskis]

Can you show agent log when it starts? I'm actually interesded in this line:

  3776:20160817:084541.821 TLS support:            NO

[Mr.Pelovski]

Current log on the agent

2816:20160817:195618.233 Starting Zabbix Agent [My host]. Zabbix 3.0.0 (revision 58455).
2816:20160817:195618.233 **** Enabled features ****
2816:20160817:195618.233 IPv6 support: YES
2816:20160817:195618.233 TLS support: NO
2816:20160817:195618.233 **************************
2816:20160817:195618.233 using configuration file: C:\zabbix\zabbix_agentd.win.conf
2816:20160817:195618.233 agent #0 started [main process]
4440:20160817:195618.233 agent #2 started [active checks #1]
1944:20160817:195618.249 agent #1 started [collector]
4440:20160817:195618.249 no active checks on server [Server ip and port]: connection of type "unencrypted" is not allowed for host "My host"

**** Enabled features ****
2816:20160817:195618.233 TLS support: NO

When i configure TLS option on agent config file feature TLS it will be YES ?
And when is isn't "Enable features TLS support will be NO " ?

When i try to manually start zabbix agent with TLS option receive that

[andris]

You might be interested in https://support.zabbix.com/browse/ZBXNEXT-3047

[Mr.Pelovski]

You might be interested in https://support.zabbix.com/browse/ZBXNEXT-3047

Thanks a lot that was i needed