Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-17929

Zabbix 5.0.1 unable to configure Mysql DBTLS

XMLWordPrintable

    • Icon: Problem report Problem report
    • Resolution: Won't fix
    • Icon: Trivial Trivial
    • 5.2 (plan)
    • 5.0.1
    • Packages (C)
    • None
    • Centos 7.5
      Mysql 5.7.27 SSL is enabled, and the SSL connection is working using Mysql Workbench
    • Sprint 66 (Jul 2020), Sprint 67 (Aug 2020)
    • 0.25

      Steps to reproduce:

      1. Install the new Zabbix 5.0.1
      2. Check SSL Encryption on the Web Configuration interface

      TLS certificate authority: /var/lib/mysql/ca.pem

      TLS certificate:/var/lib/mysql/server-cert.pem

      TLS key file:/var/lib/mysql/server-key.pem

      3. Click the next Web interface to report an error, and the background HTTP error log is shown as follows:

      [Thu Jun 18 14:57:58.561949 2020] [proxy_fcgi:error] [pid 23813] [client 172.16.97.20:56025] AH01071: Got error 'PHP message: PHP Warning: 
      mysqli::real_connect(): this stream does not support SSL/crypto in /usr/share/zabbix/include/classes/db/MysqlDbBackend.php on line 169\nPHP 
      message: PHP Warning: mysqli::real_connect(): Cannot connect to MySQL by using SSL in /usr/share/zabbix/include/classes/db/MysqlDbBackend.p
      hp on line 169\nPHP message: PHP Warning: mysqli::real_connect(): [2002] (trying to connect via (null)) in /usr/share/zabbix/include/class
      es/db/MysqlDbBackend.php on line 169\nPHP message: PHP Warning: mysqli::real_connect(): (HY000/2002): in /usr/share/zabbix/include/classes
      /db/MysqlDbBackend.php on line 169\n', referer: [http://172.16.97.71/zabbix/zabbix.php?action=dashboard.view]
      

      4. When I cancel the SSL configuration after successful installation zabbix 5.0.1. Then I try to modify the/etc/zabbix/web/zabbix.con.php file enable DBTLS, there will be more mistakes

      5.When I edit /etc/zabbix/zabbix_server.conf,DBTLS configuration, Zabbix-Server cannot be restarted and there is an error log

      [root@localhost httpd]# tail -F /var/log/messages

      Jun 18 17:04:46 localhost zabbix_server: zabbix_server [32079]: "DBTLSConnect" configuration parameter cannot be used: Zabbix server was compiled without PostgreSQL or MySQL library version that support TLS
      Jun 18 17:04:46 localhost zabbix_server: zabbix_server [32079]: "DBTLSCAFile" configuration parameter cannot be used: Zabbix server was compiled without PostgreSQL or MySQL library version that support TLS
      Jun 18 17:04:46 localhost zabbix_server: zabbix_server [32079]: "DBTLSCertFile" configuration parameter cannot be used: Zabbix server was compiled without PostgreSQL or MySQL library version that support TLS
      Jun 18 17:04:46 localhost zabbix_server: zabbix_server [32079]: "DBTLSKeyFile" configuration parameter cannot be used: Zabbix server was compiled without PostgreSQL or MySQL library version that support TLS
      

       

      Result:
      See screenshot...
      See log file...

        1. certificate.png
          certificate.png
          11 kB
        2. error_log
          5.19 MB
        3. messages
          2.28 MB
        4. zabbix_server.conf
          21 kB
        5. zabbix_server.log
          131 kB
        6. zabbix.conf.php
          2 kB

            yurii Jurijs Klopovskis
            temence@163.com [email protected]
            Team I
            Votes:
            1 Vote for this issue
            Watchers:
            12 Start watching this issue

              Created:
              Updated:
              Resolved: