Zabbix Agent 2 behind TLS interception

[abockhold]

Hello,

I've got a host (Debian 12) which is situated behind a firewall which does TLS interception. General TLS traffic works after adding the root CA to the system store. The Zabbix Agent 2 continues to fail. systemctl status zabbix-agent2.service shows:

[101] cannot connect to [zabbix.example.com:10051]: C0F6FFAB597F0000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1586:SSL alert

How can I add the root CA to the certificate trust store of Zabbix Agent 2? Thanks!

Regards
Andreas

[cyber]

By using all the provided TLS* config vars here.. https://www.zabbix.com/documentation.../zabbix_agentd

[abockhold]

Thank you - unfortunately I didn't see your answer earlier. Probably I should try "TLSCAFile".

[abockhold]

As a follow up: actually it did not work with adjusting TLS-settings. We had to disable TLS intercept for the agent traffic.