Proxy clone saves PSK identity and PSK of source proxy instead of values entered after "Change PSK"

ExportXMLWordPrintable

    • Type: Problem report
    • Resolution: Unresolved
    • Priority: Minor
    • None
    • Affects Version/s: 8.0.0
    • Component/s: Frontend (F)

      Environment

      • Zabbix frontend 8.0.0 (tag "8.0.0", commit "c81e276e505"), PHP 8.3, PostgreSQL 16.15.
      • User "Admin" with "Super admin role".

      Steps to reproduce

      1. Go to Administration → Proxies and click Create proxy.
      2. Set Proxy name "psk-src-active" and Proxy mode "Active".
      3. On Encryption tab select only "PSK" in Connections from proxy, set PSK identity "id-src-active" and PSK "11111111111111111111111111111111".
      4. Click Add.
      5. Open proxy "psk-src-active" and click Clone.
      6. Set Proxy name "psk-clone-active".
      7. On Encryption tab click Change PSK, set PSK identity "id-new-active" and PSK "22222222222222222222222222222222".
      8. Click Add.
      9. Repeat steps 1-8 for passive proxy with these changes:
        1. names "psk-src-passive" and "psk-clone-passive", identities "id-src-passive" and "id-new-passive";
        2. Proxy mode "Passive", Interface address "127.0.0.1" and port "10051";
        3. "PSK" in Connections to proxy instead of Connections from proxy.
      10. Run query from block 1.

      1. Query

      SELECT name, operating_mode, tls_connect, tls_accept, tls_psk_identity, tls_psk
FROM proxy
WHERE name IN ('psk-src-active', 'psk-clone-active', 'psk-src-passive', 'psk-clone-passive')
ORDER BY proxyid;

      Result

      Frontend shows "Proxy added", but both clones get PSK identity and PSK of source proxy:

             name        | operating_mode | tls_connect | tls_accept | tls_psk_identity |             tls_psk
-------------------+----------------+-------------+------------+------------------+----------------------------------
 psk-src-active    |              0 |           1 |          2 | id-src-active    | 11111111111111111111111111111111
 psk-clone-active  |              0 |           1 |          2 | id-src-active    | 11111111111111111111111111111111
 psk-src-passive   |              1 |           2 |          1 | id-src-passive   | 11111111111111111111111111111111
 psk-clone-passive |              1 |           2 |          1 | id-src-passive   | 11111111111111111111111111111111
      Check Result
      Clone with Change PSK, active proxy, 3 runs Source PSK identity and PSK saved
      Clone with Change PSK, passive proxy, 3 runs Source PSK identity and PSK saved
      Clone without Change PSK Source PSK identity and PSK saved
      Update of existing proxy with Change PSK Entered PSK identity and PSK saved
      Clone with Change PSK on 7.4.16, 2 runs per mode Entered PSK identity and PSK saved

      Expected

      Cloned proxy is saved with PSK identity and PSK entered after Change PSK, as in 7.4.16.
      Affects frontend clone of any proxy that uses PSK: "PSK" in Connections from proxy for active proxy, in Connections to proxy for passive proxy.

            Assignee:
            Zabbix Development Team
            Reporter:
            Piotr Wegrzyn
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: