Zabbix Web Service Error

[barisben]

Hey,

I'm facing trouble while enabling the schedule report services.

The error log message;

2025/11/07 06:44:45.130685 http: TLS handshake error from 192.168.10.10:59184: tls: client didn't provide a certificate

Here are the settings;
/etc/nginx/conf.d/zabbix.conf

server {
    listen          443 ssl;
    server_name     zabbix.domain.com;

    ssl_certificate     /etc/zabbix/ssl.pem;
    ssl_certificate_key /etc/zabbix/key.pem;

        root    /usr/share/zabbix/ui;

        index   index.php;
....
....
​

/etc/zabbix/zabbix_server.conf

StartReportWriters=1
WebServiceURL=https://zabbix.domain.com:10053/report​​​

/etc/zabbix/zabbix_web_service.conf

TLSAccept=cert
TLSCAFile=/etc/zabbix/ssl.pem
TLSCertFile=/etc/zabbix/ssl.pem
TLSKeyFile=/etc/zabbix/key.pem
IgnoreURLCertErrors=1​

How can I solve that issue?

[PSklyar]

I see, what about to configure TLS between zabbix server and frontend ?

https://www.zabbix.com/documentation/current/en/manual/appendix/install/frontend_encrypt

[PSklyar]

Hey hey
As hotfix you can try this step to stop web server and zabbix server
Then make following steps :
1)Update web service config to use unencrypted:

sed -i 's/^TLSAccept=.*/TLSAccept=unencrypted/' /etc/zabbix/zabbix_web_service.conf
sed -i 's/^TLSConnect=.*/TLSConnect=unencrypted/' /etc/zabbix/zabbix_web_service.conf

2)Update TLS file paths
sed -i 's/^TLSCAFile/# TLSCAFile/' /etc/zabbix/zabbix_web_service.conf
sed -i 's/^TLSCertFile/# TLSCertFile/' /etc/zabbix/zabbix_web_service.conf
sed -i 's/^TLSKeyFile/# TLSKeyFile/' /etc/zabbix/zabbix_web_service.conf

3)Update server to use HTTP
sed -i 's|^WebServiceURL=.*|WebServiceURL=http://localhost:10053/report|' /etc/zabbix/zabbix_server.conf

Than enable web server and zabbix server

[barisben]

We use only https for zabbix so it can't connect when I try with http.

[PSklyar]

I see, what about to configure TLS between zabbix server and frontend ?

https://www.zabbix.com/documentation/current/en/manual/appendix/install/frontend_encrypt

[barisben]

After this configuration you mentioned, it works like a charm. Thank you.