PSK Encryption Help

[monarch684]

All,

I am trying to setup PSK encryption but obviously doing something wrong. Here is the setup.

DB: MySQL
Zabbix Host (3.4.4)(Ubuntu 16.04.3 LTS) --> Zabbix Proxy (3.4.5)(Ubuntu 16.04.3 LTS) --> Zabbix Agent (3.0.4)(Windows Server 2012 R2)
Firewall - None (This is a test environment.)

For the Host Encryption I have the following: (This appears to be working)

• Connections to host - No encryption
• Connections from host - PSK
• PSK Identity - PSK01
• PSK - Very long key

For the Proxy Encryption I have the following: (This appears to be working)

• Connections to proxy - PSK
• Connections from proxy - Grayed out. Cannot make a selection
• PSK Identity - PSK01
• PSK - Very long key

For the Agent Encryption I have the following: (This is not working. Cannot even start the service.)

• Server=1.1.1.2 (Proxy)
• ListenIP=1.1.1.1 (Agent)
• TLS Connect - psk
• TLS Accept - psk
• TLSPSKIdentity - PSK01
• TLSPSKFile - File location to zabbax_psk.psk

When I make the changes to zabbix_agentd.win.conf, the service will not start. I am assuming that I missed a configuration or have too many set.

I also ran WireShark and saw no encrypted traffic between any of the 3 configurations. I am a noob when it comes to WireShark so I could have misread something.

Any help is greatly appreciated.

[rthonpm]

The pre-compiled Zabbix Agents for Windows do not include TLS support. Right now, the only solution is to build your own version of the Windows agent with a TLS library.

Hopefully, there will be pre-compiled versions with TLS coming from the Zabbix Team. It seems a little short-sighted to not have a version available.

[monarch684]

Something new to learn......yay. I have never compiled the agents so this will be a new experience for me. Can I assume there are some instructions out there somewhere?

[rthonpm]

This is the closest thing to an instruction set right now: https://support.zabbix.com/browse/ZBXNEXT-3047

[monarch684]

That is the one I am currently looking at, so I guess I am going in the right direction. Thank you.