-
Incident report
-
Resolution: Duplicate
-
Trivial
-
None
-
3.0.4rc1
-
GNU/Linux
-
Sprint 52 (May 2019)
Server (or proxy) is compiled with TLS support (OpenSSL), but has no TLS parameters in server (or proxy) configuration file. Test host is configured to use no encryption. When the server and agent are running, try to reconfigure in frontend connections to host from "unencrypted" to "certificate" back and forth several times (wait until server configuration is updated). The host is passed between poller and unreachable poller processes. Chances are one of them will crash.
Example:
12055:20160704:170309.403 server #8 started [unreachable poller #1] 12055:20160704:170309.408 In zbx_tls_init_child() 12055:20160704:170309.411 OpenSSL library (version OpenSSL 1.0.2h 3 May 2016) initialized 12055:20160704:170309.413 zbx_tls_init_child() PSK ciphersuites: PSK-AES128-CBC-SHA 12055:20160704:170309.414 End of zbx_tls_init_child() .... 12055:20160704:170926.484 In get_values() 12055:20160704:170926.484 In DCconfig_get_poller_items() poller_type:1 12055:20160704:170926.484 End of DCconfig_get_poller_items():1 12055:20160704:170926.484 In substitute_key_macros() data:'proc.num[]' 12055:20160704:170926.484 End of substitute_key_macros():SUCCEED data:'proc.num[]' 12055:20160704:170926.484 In substitute_simple_macros() data:'10070' 12055:20160704:170926.484 In get_value() key:'proc.num[]' 12055:20160704:170926.484 In get_value_agent() host:'Zabbix server' addr:'127.0.0.1' key:'proc.num[]' conn:'TLS with certificate' 12055:20160704:170926.485 In zbx_tls_connect(): issuer:"" subject:"" 12055:20160704:170926.485 Got signal [signal:11(SIGSEGV),reason:1,refaddr:0xfffffff7]. Crashing ... 12055:20160704:170926.485 ====== Fatal information: ====== 12055:20160704:170926.485 Program counter: 0x7f1bf9873bb4 12055:20160704:170926.485 === Registers: === 12055:20160704:170926.485 r8 = 0 = 0 = 0 12055:20160704:170926.485 r9 = 6669747265632064 = 7379557499099357284 = 7379557499099357284 12055:20160704:170926.485 r10 = 2bc = 700 = 700 12055:20160704:170926.485 r11 = 7f1bfbb46500 = 139758163748096 = 139758163748096 12055:20160704:170926.485 r12 = 17fd0d0 = 25153744 = 25153744 12055:20160704:170926.485 r13 = 7f1bf9b96bc8 = 139758130523080 = 139758130523080 12055:20160704:170926.485 r14 = 7ffe7ae54728 = 140730960267048 = 140730960267048 12055:20160704:170926.485 r15 = 4 = 4 = 4 12055:20160704:170926.485 rdi = ffffffff = 4294967295 = 4294967295 12055:20160704:170926.485 rsi = 7f1bfb7ea350 = 139758160225104 = 139758160225104 12055:20160704:170926.485 rbp = 7ffe7ae4c778 = 140730960234360 = 140730960234360 12055:20160704:170926.485 rbx = ffffffff = 4294967295 = 4294967295 12055:20160704:170926.485 rdx = 17be560 = 24896864 = 24896864 12055:20160704:170926.485 rax = 0 = 0 = 0 12055:20160704:170926.485 rcx = 23b = 571 = 571 12055:20160704:170926.485 rsp = 7ffe7ae4c558 = 140730960233816 = 140730960233816 12055:20160704:170926.485 rip = 7f1bf9873bb4 = 139758127233972 = 139758127233972 12055:20160704:170926.485 efl = 10206 = 66054 = 66054 12055:20160704:170926.485 csgsfs = 2b000000000033 = 12103423998558259 = 12103423998558259 12055:20160704:170926.485 err = 4 = 4 = 4 12055:20160704:170926.485 trapno = e = 14 = 14 12055:20160704:170926.485 oldmask = 0 = 0 = 0 12055:20160704:170926.485 cr2 = fffffff7 = 4294967287 = 4294967287 12055:20160704:170926.485 === Backtrace: === 12055:20160704:170926.485 20: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](print_ fatal_info+0xf7) [0x51df87] 12055:20160704:170926.485 19: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values]() [0x5 1e424] 12055:20160704:170926.485 18: /lib/x86_64-linux-gnu/libc.so.6(+0x334e0) [0x7f1bf982b4e0] 12055:20160704:170926.485 17: /lib/x86_64-linux-gnu/libc.so.6(cfree+0x14) [0x7f1bf9873bb4] 12055:20160704:170926.485 16: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2(CRYPTO_free+0x1d) [0x7f1bfb71adcd] 12055:20160704:170926.485 15: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2(sk_free+0x17) [0x7f1bfb7d1b87] 12055:20160704:170926.485 14: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2(+0x1724ae) [0x7f1bfb8154ae] 12055:20160704:170926.485 13: /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2(X509_VERIFY_PARAM_free+0xe) [0x7f1bfb81553e] 12055:20160704:170926.485 12: /usr/lib/x86_64-linux-gnu/libssl.so.1.0.2(SSL_free+0x49) [0x7f1bfbb46549] 12055:20160704:170926.485 11: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](zbx_tls_connect+0x2e3) [0x5457a3] 12055:20160704:170926.485 10: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values]() [0x5495ec] 12055:20160704:170926.485 9: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](zbx_tcp_connect+0x38) [0x549a68] 12055:20160704:170926.485 8: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](get_value_agent+0x178) [0x42ac28] 12055:20160704:170926.485 7: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values]() [0x43f9e3] 12055:20160704:170926.485 6: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](poller_thread+0x151) [0x442031] 12055:20160704:170926.485 5: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](zbx_thread_start+0x56) [0x51f1a6] 12055:20160704:170926.485 4: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](MAIN_ZABBIX_ENTRY+0x837) [0x423697] 12055:20160704:170926.485 3: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](daemon_start+0x209) [0x51d569] 12055:20160704:170926.485 2: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](main+0x342) [0x4189e2] 12055:20160704:170926.485 1: /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0) [0x7f1bf98185f0] 12055:20160704:170926.485 0: sbin/zabbix_server: unreachable poller #1 [got 0 values in 0.000154 sec, getting values](_start+0x29) [0x418d19]
- duplicates
-
ZBX-11101 CA certificate with empty Subject & Issuer make Zabbix server fail
- Closed