PSK encryption on Windows server

[sph919]

Hi all,

Trying to get this up on a windows server (Have had no problems setting it on Linux boxes).

Host > encryption
Set Connections to host as PSK
Connections from host PSK
Given it a identity name
and generated the PSK

and updated the Host.

On the host I have edited the zabbix_agentd.conf and at the button

added to these vaules

### Option: TLSPSKIdentity
# Unique, case sensitive string used to identify the pre-shared key.
#
# Mandatory: no
# Default:
TLSPSKIdentity=hyper1

### Option: TLSPSKFile
# Full pathname of a file containing the pre-shared key.
#
# Mandatory: no
# Default:
TLSPSKFile=C:\zabbix\bin\database.txt (this is where I'm storging the PSK string)

I restart the agent, but get a error back saying 'Windows could not start the Zabbix agent server on Local Computer .Error 1053: The service did not respond to the start or control request in a timely fashion'
I've

Checking the log:

2136:20190211:110948.751 Starting Zabbix Agent [Hyper1]. Zabbix 4.0.4 (revision 89349).
2136:20190211:110948.752 **** Enabled features ****
2136:20190211:110948.753 IPv6 support: YES
2136:20190211:110948.754 TLS support: NO
2136:20190211:110948.756 **************************
2136:20190211:110948.757 using configuration file: C:\zabbix\bin\zabbix_agentd.conf
2136:20190211:110948.761 agent #0 started [main process]
6828:20190211:110948.763 agent #1 started [collector]
1636:20190211:110948.764 agent #2 started[listener #1]
844:20190211:110948.765 agent #4 started[listener #3]
6744:20190211:110948.766 agent #3 started[listener #2]
8256:20190211:110948.767 agent #5 started [active checks #1]
8256:20190211:110951.760 active check configuration update from [172.24.228.107:10051] started to fail (cannot connect to [[172.24.228.107]:10051]: (null))
6744:20190211:111026.027 failed to accept an incoming connection: from 172.24.228.107: support for TLS was not compiled in
236:20190211:111036.809 Zabbix Agent stopped. Zabbix 4.0.4 (revision 89349).

How to I get a agent that is complied with TLS support?

[andris]

See https://www.zabbix.com/download_agents 4.0 with TLS support:

https://www.zabbix.com/downloads/4.0.4/zabbix_agents-4.0.4-win-amd64-openssl.zip

https://www.zabbix.com/downloads/4.0.4/zabbix_agents-4.0.4-win-i386-openssl.zip

[sph919]

Thanks andris, didn't realise that its was the openssl agent that had that support

[sph919]

andris i've install the openssl agent, and filled in the TSL part in the conf and on the host, but when I start the agent I get

C:\zabbix\bin>zabbix_agentd.exe -s
zabbix_agentd.exe [8824]: ERROR: cannot start service [Zabbix Agent]: [0x0000041D] The service did not respond to the start or control request in a timely fashion.

There isn't a log file to view and event view just gives me the same details as my output.

[sph919]

Sorry, I had not changed TLSAccept and TLSConnect to psk. All sorted