Trying my first TLS setup for an active proxy in Zabbix 3.0.8
It works if I leave Issuer & Subject empty in the proxy admin screen.
As I understand the doc, the Issuer should be what is in the cert defined in the file reference by the proxy TLSCertFile setting. Using openssl to read the cert gives this:
openssl x509 -in zabbix-proxy.cer -text -noout | grep Issuer
Issuer: C=US, ST=MI, L=Ann Arbor, O=Internet2, OU=InCommon, CN=InCommon RSA Server CA
Using the string starting with C= causes this error:
cannot send history data to server at "ip.addr.redacted": proxy "zabbix-proxy" certificate issuer does not match
Any idea what I've done wrong?
Thanks
It works if I leave Issuer & Subject empty in the proxy admin screen.
As I understand the doc, the Issuer should be what is in the cert defined in the file reference by the proxy TLSCertFile setting. Using openssl to read the cert gives this:
openssl x509 -in zabbix-proxy.cer -text -noout | grep Issuer
Issuer: C=US, ST=MI, L=Ann Arbor, O=Internet2, OU=InCommon, CN=InCommon RSA Server CA
Using the string starting with C= causes this error:
cannot send history data to server at "ip.addr.redacted": proxy "zabbix-proxy" certificate issuer does not match
Any idea what I've done wrong?
Thanks