Ad Widget

Collapse

Issue with TLS using Template DB MongoDB node by Zabbix Agent 2.

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • a.kocherga
    Junior Member
    • Oct 2023
    • 4

    #1

    Issue with TLS using Template DB MongoDB node by Zabbix Agent 2.

    Hello.

    Zabbix Server version: 5.0
    Zabbix Agent2 version: 5.0
    Single node MongoDB server with a TLS certificate signed by CA

    It seems that Zabbix doesn't know how to work through a secure tcp connection to the MongoDB server.

    mongod.conf:

    net:
    port: 27017
    bindIp: 0.0.0.0
    ssl:
    FIPSMode: true
    mode: requireSSL
    PEMKeyFile: /etc/pki/tls/certs/key.pem
    disabledProtocols: TLS1_0,TLS1_1


    zabbix_get -s mongo-host -k 'mongodb.ping["tcp://mongo-host:27017","zabbix","***"j'
    0

    mongod.log:
    2023-10-18T06:21:03.233+0000 I NETWORK [conn108412] Error receiving request from client: SSLHandshakeFailed: The server is configured to only allow SSL connections. Ending connection from 192.x.x.x:35750 (connection id: 108412)


    Please tell how to get around the problem?
  • a.kocherga
    Junior Member
    • Oct 2023
    • 4

    #2
    Are there some people from the official Zabbix team?

    Comment

    • dimir
      Zabbix developer
      • Apr 2011
      • 1080

      #3
      Let me check it...

      Comment

      • dimir
        Zabbix developer
        • Apr 2011
        • 1080

        #4
        Yeah, this is reported https://support.zabbix.com/browse/ZBX-23611

        One thing, please keep in mind that the fix will be available only for Zabbix 6.0 and newer!
        Last edited by dimir; 01-11-2023, 18:08.

        Comment


        • dimir
          dimir commented
          Editing a comment
          Fixed in 6.0 and up.
      • a.kocherga
        Junior Member
        • Oct 2023
        • 4

        #5
        Thank you. I'm waiting for the docker image to be released with version 6.4.9 for testing.​

        Comment

        • a.kocherga
          Junior Member
          • Oct 2023
          • 4

          #6
          Thanks everyone - it works now!​

          Comment

          Working...