Zabbix Agent Certificate

[srdev]

Hi,

We try to implement a secure communication between our zabbix server and zabbix agent (only server to agent), according to the documentation we implemented the following configuration on :

- Zabbix Agent

TLSAccept=cert
TLSCAFile=Our certificate CA
TLSCertFile=Our certificate file
TLSKeyFile= Our certificate key

- Zabbix server
We activate Certificate Encryption with the Issuer and subject chain that match with the Zabbix Agent Certificate



After this configuration we still have an error => cannot connect with TLS and certificate : no valid certificate loaded



On Zabbix Agent we have => failed to accept an incoming connection: from xx.xx.xx.xx : unencrypted connections are not allowed

All the CA are installed on zabbix server, zabbix agent certifcate match with the key.

we also test with openssl a connection to the agent on zabbix server with succes
openssl s_client -connect host_ip_zabbix_agent:10050 => OK

Do we miss something ?

Thanks
Julien

[Moob]

Hi,

What if you add TLSServerCertIssuer and TLSServerCertSubject to your agent config, does that work ?

Regards