Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-20228

active check configuration update from started to fail (SSL_write() timed out)

    XMLWordPrintable

Details

    • Problem report
    • Status: Confirmed
    • Trivial
    • Resolution: Unresolved
    • 5.0.17, 5.4.7
    • None
    • Agent (G)
    • Client operating system: Windows 10 Pro 21H1 Build 19043.1348
      Client hardware: Lenovo X1 Carbon and Lenovo ThinkBook 13S G2 ITL

      Server: Zabbix Server 5.0.16 on Ubuntu 18.04 LTS

    Description

      We use the Zabbix agent with over 300 clients secured by TLS with pre-shared key. With approx. 30 new devices we get the following error.

      Zabbix Agent:

      active check configuration update from [monitoring.example.com:10051] started to fail (SSL_write() timed out)
      

      Zabbix Server:

      failed to accept an incoming connection: from 123.123.123.123: TLS handshake set result code to 1: file ../ssl/t1_lib.c line 2589: error:14201076:SSL routines:tls_choose_sigalg:no suitable signature algorithm: TLS write fatal alert "handshake failure"
      

       

      The configuration is identical to devices on which the same configuration works.

      The problem exists with Zabbix Agent 5.0.14 installed via Chocolatey, 5.0.17 manually installed (MSI with OpenSSL) as well as with 5.4.7 manually installed (MSI with OpenSSL).

      We also tested it with Zabbix Server 5.4.7 and Zabbix Agent 5.4.7, with the same result.

      It only works with Zabbix Agent 2 on these clients with identical configuration.

       

      We are happy to provide further information that will help to identify the problem or to give access to one of the devices for debugging purposes, e.g. via TeamViewer.

       

      In the forum someone has the same problem: https://www.zabbix.com/forum/zabbix-troubleshooting-and-problems/424646-how-to-solve-problem-active-check-update-from-started-to-fail-ssl_write-timed-out

       

      Zabbix Agent logs with DebugLevel=5 and configuration files attached.

      Attachments

        1. client.pcap
          3 kB
        2. psk.key
          0.1 kB
        3. Screenshot_20211130_105051.png
          Screenshot_20211130_105051.png
          19 kB
        4. Screenshot_20211130_105107.png
          Screenshot_20211130_105107.png
          18 kB
        5. Screenshot 2021-11-23 at 09.23.38.png
          Screenshot 2021-11-23 at 09.23.38.png
          526 kB
        6. Screenshot 2021-11-23 at 09.24.28.png
          Screenshot 2021-11-23 at 09.24.28.png
          503 kB
        7. server.pcap
          3 kB
        8. zabbix_agent-5.0.18rc1-windows-amd64-openssl.zip
          3.82 MB
        9. zabbix_agent-5.0.18rc1-windows-amd64-openssl-10.zip
          3.82 MB
        10. zabbix_agent-5.0-debug.zip
          1.40 MB
        11. zabbix_agentd_debug2.zip
          1.39 MB
        12. zabbix_agentd.conf
          15 kB
        13. zabbix_agentd.exe.zip
          1.39 MB
        14. zabbix_agentd.log
          8 kB
        15. zabbix_agentd-10.log
          2.85 MB
        16. zabbix_agentd-2.log
          16 kB
        17. zabbix_agentd-3.0.32.log
          17 kB
        18. zabbix_agentd-3.log
          15 kB
        19. zabbix_agentd-4.log
          16 kB
        20. zabbix_agentd-5.log
          14 kB
        21. zabbix_agentd-6.log
          18 kB
        22. zabbix_agentd-7.log
          77 kB
        23. zabbix_agentd-8.log
          812 kB
        24. zabbix_server.conf
          23 kB

        Issue Links

          Activity

            People

              zabbix.dev Zabbix Development Team
              pah Pah
              Votes:
              1 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated: