From: Mark Patruck <mark@wrapped.cx>
Subject: Re: net/zabbix-agent PSK issue
To: Renaud Allard <renaud@allard.it>
Cc: ports <ports@openbsd.org>, robert@openbsd.org
Date: Thu, 12 Sep 2024 10:53:28 +0200

On 12.09.2024 10:44, Renaud Allard wrote:
>Hello,
>
>I tried to configure a PSK on zabbix agentd on OpenBSD 7.5-stable and 
>PSK support seems to be absent. Is this expected?

yes. We only support certificates.

>amandil# cat /etc/zabbix/zabbix_agentd.conf
>
>PidFile=/var/run/zabbix/zabbix_agentd.pid
>LogType=system
>Server=***************
>ServerActive=127.0.0.1
>Hostname=amandil
>TLSConnect=psk
>TLSAccept=psk
>TLSPSKFile=/etc/zabbix/agent.psk
>TLSPSKIdentity=psk1
>amandil# rcctl restart zabbix_agentd
>
>zabbix_agentd(ok)
>zabbix_agentd(failed)
>amandil# zabbix_agentd
>
>zabbix_agentd [23544]: ERROR: value of parameter "TLSConnect" requires 
>support of encrypted connection with PSK but support for PSK was not 
>compiled in
>amandil# pkg_info zabbix-agent
>Information for inst:zabbix-agent-6.4.11
>
>Best Regards



--
Mark Patruck ( mark at wrapped.cx )
GPG key 0xF2865E51 / 187F F6D3 EE04 1DCE 1C74  F644 0D3C F66F F286 5E51
  
https://www.wrapped.cx