Error "TLS read fatal alert "bad record mac"" on agent

[awrow]

Hello,

I have an error in agent client log:

active check configuration update from [62.X.X.X:10051] started to fail (TCP successful, cannot establish TLS to [[62.X.X.X:10051]: SSL_connect() set result code to SSL_ERROR_SSL: file ../ssl/record/rec_layer_s3.c line 1528: error:140943FC:SSL routines:ssl3_read_bytes:sslv3 alert bad record mac: SSL alert number 20: TLS read fatal alert "bad record mac")

I checked PSK identity and PSK on both server and client.

Client runs Ubuntu 18.04
OpenSSL version is 1.1.1.

What can cause this error?

[awrow]

I've disabled TLS. Another error rises:

Received empty response from Zabbix Agent at [92.X.X.X]. Assuming that agent dropped connection because of access permissions.

I uncommented this lines:
AllowRoot=1
user=root

Also I edited systemctl edit zabbix-agent :
[Service]
User=root
Group=root

UPD:
Without TLS the connection works but with it shows the error I stated at the 1 post

[Hamardaban]

The same PSK identification string is used, but different PSK values are used for communication between components.

[awrow]

I used the same PSK Identity and PSK value for the server and the client. Between what "components"?

[Hamardaban]

https://www.zabbix.com/documentation...rd&s%5B%5D=mac.

[awrow]

Hamardaban

[Hamardaban]

Great. So in your case, this is not the most common reason.

https://www.zabbix.com/forum/zabbix-troubleshooting-and-problems/49497-zabbix-agent-problem-psk

(and try specifying the psk identity without a space)

[awrow]

The firewall was disabled on both server and client.
Also I tried to specify the psk identity without a space - no reaction.

upd: there is no any hardware firewall

[awrow]

Could the reason be the different versions of OpenSSL on the server and the client? Right now I can't check this.

[awrow]

TLS connections for other clients that previously worked started to fail.
The problem could be in the 4.4 Zabbix version.