diff options
| author | Martins Abele <martins.abele@zabbix.com> | 2020-01-22 17:27:31 +0300 |
|---|---|---|
| committer | Martins Abele <martins.abele@zabbix.com> | 2020-01-29 18:21:36 +0300 |
| commit | d83cb370f25c33b7d16f997bcb1cf8ae46f4222e (patch) | |
| tree | 4981b31ff04353aa94bfde324fde966de42a0459 /conf | |
| parent | 752b77cdd01e7a745c7f19d764509539a18ebb77 (diff) | |
.......PS. [ZBXNEXT-5641] enabled TLS for server connection to mysql and postgres databases
Diffstat (limited to 'conf')
| -rw-r--r-- | conf/zabbix_proxy.conf | 40 | ||||
| -rw-r--r-- | conf/zabbix_server.conf | 40 |
2 files changed, 80 insertions, 0 deletions
diff --git a/conf/zabbix_proxy.conf b/conf/zabbix_proxy.conf index 5ae0ac4c23a..bd503617370 100644 --- a/conf/zabbix_proxy.conf +++ b/conf/zabbix_proxy.conf @@ -736,3 +736,43 @@ StatsAllowedIP=127.0.0.1 # Mandatory: no # Default: # TLSPSKFile= + +### Option: DBTLSMode +# Database connection TLS mode +# Possible values: disable, prefer(default), require, verify-ca, verify-identity +# +# Mandatory: no +# Default: +# DBTLSMode=prefer + +### Option: DBTLSCertFile +# Full pathname of file containing client certificate for +# authenticating to database +# +# Mandatory: no +# Default: +# DBTLSCertFile= + +### Option: DBTLSKeyFile +# Full pathname of file containing the private key for +# authenticating to database +# +# Mandatory: no +# Default: +# DBTLSKeyFile= + +### Option: DBTLSCAFile +# Full pathname of a file containing the top-level CA(s) certificates for +# database server certificate verification. +# +# Mandatory: no +# Default: +# DBTLSCAFile= + +### Option: DBTLSCipher +# Only for MySQL! +# The list of permissible ciphers for database TLS encryption +# +# Mandatory no +# Default: +# DBTLSCipher= diff --git a/conf/zabbix_server.conf b/conf/zabbix_server.conf index dd8a6e3f19d..ca61b29e5f4 100644 --- a/conf/zabbix_server.conf +++ b/conf/zabbix_server.conf @@ -720,3 +720,43 @@ StatsAllowedIP=127.0.0.1 # Mandatory: no # Default: # TLSKeyFile= + +### Option: DBTLSMode +# Database connection TLS mode +# Possible values: disable, prefer(default), require, verify-ca, verify-identity +# +# Mandatory: no +# Default: +# DBTLSMode=prefer + +### Option: DBTLSCertFile +# Full pathname of file containing client certificate for +# authenticating to database +# +# Mandatory: no +# Default: +# DBTLSCertFile= + +### Option: DBTLSKeyFile +# Full pathname of file containing the private key for +# authenticating to database +# +# Mandatory: no +# Default: +# DBTLSKeyFile= + +### Option: DBTLSCAFile +# Full pathname of a file containing the top-level CA(s) certificates for +# database server certificate verification. +# +# Mandatory: no +# Default: +# DBTLSCAFile= + +### Option: DBTLSCipher +# Only for MySQL! +# The list of permissible ciphers for database TLS encryption +# +# Mandatory no +# Default: +# DBTLSCipher= |