Details
-
Type:
Incident report
-
Status: Closed
-
Priority:
Critical
-
Resolution: Fixed
-
Affects Version/s: 3.0.22, 3.4.13, 4.0.0beta2
-
Fix Version/s: 3.0.23rc1, 3.4.15rc1, 4.0.1rc1, 4.2.0alpha1, 4.2 (plan)
-
Component/s: Server (S)
-
Labels:
-
Environment:Archlinux, zabbix server 3.4.13
-
Team:Team A
-
Sprint:Sprint 43, Sprint 44, Sprint 45
-
Story Points:11
Description
Steps to reproduce:
- Install openssl 1.1.1
- Try to zabbix_get with --tls-connect
Result:
# zabbix_get -s agent.example.com --tls-connect psk --tls-psk-file "/etc/zabbix/agent.psk" --tls-psk-identity "PSK Agent" -k agent.ping zabbix_get [2014]: Get value error: TCP successful, cannot establish TLS to [[agent.example.com]:10050]: SSL_connect() set result code to SSL_ERROR_SSL: file ssl/statem/extensions_clnt.c line 801: error:14212044:SSL routines:tls_construct_ctos_early_data:internal error: TLS wri te fatal alert "internal error"
Attachments
Issue Links
- is duplicated by
-
ZBX-14860 openssl 1.1.1 breaks TLS-PSK in zabbix
-
- Closed
-