-
New Feature Request
-
Resolution: Unresolved
-
Minor
-
None
-
3.2.4
-
None
-
Zabbix 3.2 and above
Starting with Zabbix version 3.0, one can encrypt communication between zabbix server/proxies and agents/cmd tools using a PSK. This requires a unique identity string per host.
When using different PSK/Identities, it would make management more easy, if there would be a central place to mange the identies and have a sort of dropdown or similar to select those unassigned identities within the host configuration.
Also, currently one can setup the same identity with different PSKs across multiple hosts, which is a misconfiguration. Maybe there could be a check to warn the user if an identity already exists, but with a different PSK (or maybe an internal item that checks for integrity).
Currently, the only way to get an overview for used identities is to query the database:
select h.host, h.tls_accept, h.tls_psk, h.tls_psk_identity from hosts as h where h.tls_psk_identity != ''
- is duplicated by
-
ZBX-17991 Zabbix proxy PSK Identity and PSK
-
- Closed
-