Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-17815

Encryption does not work with EnablePersistentBuffer=1

    XMLWordPrintable

    Details

    • Type: Problem report
    • Status: Closed
    • Priority: Trivial
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 5.0.3rc1, 5.2.0alpha1, 5.2 (plan)
    • Component/s: Agent (G)
    • Labels:
      None
    • Environment:
      Centos 7/8
    • Team:
      Team C
    • Sprint:
      Sprint 65 (Jun 2020), Sprint 66 (Jul 2020), Sprint 67 (Aug 2020)
    • Story Points:
      0.5

      Description

      Zabbix 5.0.0. Installed with packages.
      Default zabbix_agent2.conf.

      Steps to reproduce:

      1. openssl rand -hex 32 > /etc/zabbix/zabbix_agent2.psk

      Added:

      TLSConnect=psk
      TLSAccept=psk
      TLSPSKIdentity=PSK10084
      TLSPSKFile=/etc/zabbix/zabbix_agent2.psk

      Restart zabbix agent.

      Encryption works without problems.

      Add to zabbix_agent2.conf:

      EnablePersistentBuffer=1
      PersistentBufferFile=/var/lib/zabbix/buffer.db

      Result:
      zabbix_agent2.log:

      2020/05/26 18:14:00.314985 [101] history upload to [127.0.0.1:10051] started to fail: read tcp 127.0.0.1:40073->127.0.0.1:10051: i/o timeout
      2020/05/26 18:14:01.316250 [101] history upload to [127.0.0.1:10051] started to fail: read tcp 127.0.0.1:49857->127.0.0.1:10051: i/o timeout
      2020/05/26 18:14:02.317464 [101] history upload to [127.0.0.1:10051] started to fail: read tcp 127.0.0.1:57599->127.0.0.1:10051: i/o timeout

      zabbix_server.log

       12801:20200526:181400.315 failed to accept an incoming connection: from 127.0.0.1: unspecified certificate verification error: TLS handshake set result code to 5:
       12801:20200526:181401.316 failed to accept an incoming connection: from 127.0.0.1: unspecified certificate verification error: TLS handshake set result code to 5:
       12801:20200526:181402.317 failed to accept an incoming connection: from 127.0.0.1: unspecified certificate verification error: TLS handshake set result code to 5:

      The remote agent is the same.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              asestakovs Aleksejs Sestakovs
              Reporter:
              Keeper Andrey Velikodnyi
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: