Get value from agent failed: TCP successful, cannot establish TLS

[V.Reddy]

Hi,

zabbix server showing below error,while connecting to zabbix agent using encryption with psk.

Get value from agent failed: TCP successful, cannot establish TLS to [[192.168.9.68]:10050]: SSL_connect() returned SSL_ERROR_SSL: file s3_pkt.c line 339: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number: TLS write fatal alert "protocol version"

my zabbix agent conf is below,

TLSConnect=psk
TLSAccept=psk
TLSPSKFile=/etc/zabbix/zabbix_agentd.psk
TLSPSKIdentity=PSK 001

https://www.zabbix.com/documentation/3.2/manual/encryption/using_pre_shared_keys

[andris]

Zabbix uses only TLS protocol version 1.2. Could it be that server or agent try to use other version ?
You can look into agent log - why agent rejected a connection.
Also Wireshark can help to see what protocol version is proposed by server and agent.

[V.Reddy]

Zabbix uses only TLS protocol version 1.2. Could it be that server or agent try to use other version ?
You can look into agent log - why agent rejected a connection.
Also Wireshark can help to see what protocol version is proposed by server and agent.

Hi Andris,

Thanks for the help. issue was agent rejected the connection.
I have updated openssl package on agent.