Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-24925

zabbix-server: supported ciphers are out of date

XMLWordPrintable

    • Icon: Problem report Problem report
    • Resolution: Cannot Reproduce
    • Icon: Trivial Trivial
    • None
    • 6.4.17
    • None
    • None
    • Debian

      Steps to reproduce:

      • configure /_home/zabbix as the home of the zabbix user (on server and destination)
      • create key pair on the server, using ssh-keygen -t ed25519, no pass phrase
      • copy public key to destination using ssh-copy-id
      • login as zabbix onf the server and verify ssh connection on the command line using "ssh zabbix@destination true"
      • setup ssh-agent item for destination, Key is "ssh.run['NFS health check']", username zabbix, public key is id_ed25519.pub, private key is id_ed25519, script is /bin/hostname
      • verify latest data for destination in Zabbis

      Result:
      Looking at latest data for destination there is an error popup for 'NFS health check saying

      Cannot establish SSH session: kex error : no match for method server host key algo: server [rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519], client [ssh-rsa]
      

      This means zabbix server and ssh server (openssh 9.7) could not agree upon common ciphers to verify the host key.

      Expected:
      Zabbix server should support modern ciphers for ssh connections. ssh-rsa has been deprecated some time ago. OpenSSH 9.8 won't include the deprecated ciphers anymore (using default build time flags).

            zabbix.support Zabbix Support Team
            harri Harri
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: