Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-17815

Encryption does not work with EnablePersistentBuffer=1

XMLWordPrintable

    • Icon: Problem report Problem report
    • Resolution: Fixed
    • Icon: Trivial Trivial
    • 5.0.3rc1, 5.2.0alpha1, 5.2 (plan)
    • None
    • Agent (G)
    • None
    • Centos 7/8
    • Team C
    • Sprint 65 (Jun 2020), Sprint 66 (Jul 2020), Sprint 67 (Aug 2020)
    • 0.5

      Zabbix 5.0.0. Installed with packages.
      Default zabbix_agent2.conf.

      Steps to reproduce:

      1. openssl rand -hex 32 > /etc/zabbix/zabbix_agent2.psk

      Added:

      TLSConnect=psk
      TLSAccept=psk
      TLSPSKIdentity=PSK10084
      TLSPSKFile=/etc/zabbix/zabbix_agent2.psk

      Restart zabbix agent.

      Encryption works without problems.

      Add to zabbix_agent2.conf:

      EnablePersistentBuffer=1
      PersistentBufferFile=/var/lib/zabbix/buffer.db

      Result:
      zabbix_agent2.log:

      2020/05/26 18:14:00.314985 [101] history upload to [127.0.0.1:10051] started to fail: read tcp 127.0.0.1:40073->127.0.0.1:10051: i/o timeout
      2020/05/26 18:14:01.316250 [101] history upload to [127.0.0.1:10051] started to fail: read tcp 127.0.0.1:49857->127.0.0.1:10051: i/o timeout
      2020/05/26 18:14:02.317464 [101] history upload to [127.0.0.1:10051] started to fail: read tcp 127.0.0.1:57599->127.0.0.1:10051: i/o timeout

      zabbix_server.log

       12801:20200526:181400.315 failed to accept an incoming connection: from 127.0.0.1: unspecified certificate verification error: TLS handshake set result code to 5:
       12801:20200526:181401.316 failed to accept an incoming connection: from 127.0.0.1: unspecified certificate verification error: TLS handshake set result code to 5:
       12801:20200526:181402.317 failed to accept an incoming connection: from 127.0.0.1: unspecified certificate verification error: TLS handshake set result code to 5:

      The remote agent is the same.

            asestakovs Aleksejs Sestakovs
            Keeper Andrey Velikodnyi
            Team C
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: