Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-18228

connection type "TLS with certificate" is not allowed for autoregistration

XMLWordPrintable

    • Icon: Incident report Incident report
    • Resolution: Won't fix
    • Icon: Trivial Trivial
    • None
    • 5.0.2
    • Server (S)
    • None

      hello,

      • i am doing some testing with zabbix-server 5.0.2 and while trying to do autoregistration with a zabbix-agent using certificates, i am getting this error in zabbix_server.log and agent is not getting registred. This used to work with zabbix4. In the web UI of Zabbix5 in the Administration=>General=>autoregistration, i don't see Encryption level Certificate.
        It looks like autoregistration with certificate is not supported by zabbix5. Could you confirm that ? Do you know if it will be supported ? Or is there something to configure ?

      thank you

      • my /etc/zabbix/zabbix_agentd.conf is
        TLSConnect=cert
        TLSAccept=cert
        TLSCAFile=/etc/zabbix/cert_serv/zabbix_server_tlscafile
        TLSCertFile=/etc/zabbix/cert_serv/zabbix_server_tlscertfile
        TLSKeyFile=/etc/zabbix/cert_serv/zabbix_server_tlskeyfile
        TLSServerCertSubject=CN=zabbix
      • zabbix_server.log
        10644:20200811:120842.468 cannot send list of active checks to "127.0.0.1": host [zabbix] not found
        10644:20200811:121042.660 autoregistration from "127.0.0.1" denied (host:"zabbix" ip:"127.0.0.1" port:10050): connection type "TLS with certificate" is not allowed for autoregistration

            zabbix.support Zabbix Support Team
            olivier E olivier E
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: