-
Incident report
-
Resolution: Fixed
-
Critical
-
3.0.22, 3.4.13, 4.0.0beta2
-
Archlinux, zabbix server 3.4.13
-
Sprint 43, Sprint 44, Sprint 45
-
11
Steps to reproduce:
- Install openssl 1.1.1
- Try to zabbix_get with --tls-connect
Result:
# zabbix_get -s agent.example.com --tls-connect psk --tls-psk-file "/etc/zabbix/agent.psk" --tls-psk-identity "PSK Agent" -k agent.ping zabbix_get [2014]: Get value error: TCP successful, cannot establish TLS to [[agent.example.com]:10050]: SSL_connect() set result code to SSL_ERROR_SSL: file ssl/statem/extensions_clnt.c line 801: error:14212044:SSL routines:tls_construct_ctos_early_data:internal error: TLS wri te fatal alert "internal error"
- is duplicated by
-
ZBX-14860 openssl 1.1.1 breaks TLS-PSK in zabbix
- Closed