Agents offline after setting PSK settings

[tsupport]

Hi,

I have started to turn on Encryption with some of the agents I have installed and those machines keep saying that they are unreachable then are OK. I have chekced and they are not going offline and both Linux (Ubuntu) and Windows machines are having the issue . When I checked the agent logs on both the linux and windows machines, the following error appears in both.

WINDOWS: TLS handshake set result code to 1: file ssl\statem\extensions.c line 1604: error:141FA0FD:SSL routines:tls_psk_do_binder:binder does not verify: TLS write fatal alert "illegal parameter"
LINUX: TLS handshake set result code to 1: file ../ssl/statem/extensions.c line 1604: error:141FA0FD:SSL routines:tls_psk_do_binder:binder does not verify: TLS write fatal alert "illegal parameter"

I have checked over and over the settings and I would assume that if I had the wrong settings it would not connect at all. I searched the forums but do not see this error in other posts.

Anyone know what the above error means and why if is coming up?

Thanks

[tsupport]

I tried to search and tried lots of changed but was unable to resolve this issue so at the moment I have turned of encryption.

[andris]

The first idea - check your PSK length. https://www.zabbix.com/documentation...re_shared_keys says that it should not exceed "512-bit (64-byte PSK, entered as 128 hexadecimal digits)" for OpenSSL 1.1.1.

[Killertjuh]

I`ll have the same problem: do you already solve this issue?

18233:20200525:075350.448 failed to accept an incoming connection: from xxx.xxx.xxx.xxx: TLS handshake set result code to 1: file ../ssl/statem/extensions.c line 1604: error:141FA0FD:SSL routines:tls_psk_do_binder:binder does not verify: TLS write fatal alert "illegal parameter"
18239:20200525:075359.315 active check data upload to [xxx.xxx.xxx.xxx:10051] is working again

[lioncub]

Confirm:
Zabbix Server 5.0.5
Zabbix Agent 2 5.0.5

Resolved after https://www.zabbix.com/forum/zabbix-...egal-parameter