EnablePersistentBuffer • PersistentBufferPeriod • PersistentBufferFile Crypto libraries Support of the mbedTLS (PolarSSL) crypto library has been discontinued. JMX monitoring attributes with tabular install Building agent binaries with static libraries with GnuTLS GnuTLS depends on the Nettle crypto backend and GMP arithmetic library. Instead of using full GMP library, this guide will use mini-gmp supported by Zabbix. Support of mbedTLS (PolarSSL) crypto library dropped mbedTLS (PolarSSL) crypto library is no longer supported by Zabbix. Supported crypto libraries are GnuTLS and OpenSSL. Minimum required

and commandline utilities when showing version information (with ’-V’ option) now also display the crypto library version. Frontend improvements • Cookie names and values are now properly URI-encoded Zabbix components using Transport Layer Security (TLS) protocol v.1.2 and 1.3 (depending on the crypto library). Certificate-based and pre-shared key-based encryption is supported. Encryption can be with encryption support To support encryption Zabbix must be compiled and linked with one of four crypto libraries: • GnuTLS - from version 3.1.18 • OpenSSL - versions 1.0.1, 1.0.2, 1.1.0 (OpenSSL 1

and commandline utilities when showing version information (with ’-V’ option) now also display the crypto library version. Frontend improvements • Cookie names and values are now properly URI-encoded with encryption support To support encryption Zabbix must be compiled and linked with one of four crypto libraries: • GnuTLS (from version 3.1.18) • OpenSSL (versions 1.0.1, 1.0.2, 1.1.0). OpenSSL 1 --with-libcurl --with-libxml2 --with-openssl Different Zabbix components may be compiled with different crypto libraries (e.g. a server with OpenSSL, an agent with GnuTLS). In our tests OpenSSL was the fastest

install Building agent binaries with static libraries with GnuTLS GnuTLS depends on the Nettle crypto backend and GMP arithmetic library. Instead of using full GMP library, this guide will use mini-gmp Zabbix components using Transport Layer Security (TLS) protocol v.1.2 and 1.3 (depending on the crypto library). Certificate-based and pre-shared key-based encryption is supported. Encryption can be with encryption support To support encryption Zabbix must be compiled and linked with one of four crypto libraries: • GnuTLS - from version 3.1.18 • OpenSSL - versions 1.0.1, 1.0.2, 1.1.0, 1.1.1 • LibreSSL

and commandline utilities when showing version information (with ’-V’ option) now also display the crypto library version. Frontend improvements • Cookie names and values are now properly URI-encoded with encryption support To support encryption Zabbix must be compiled and linked with one of three crypto libraries: • mbed TLS (formerly PolarSSL)(version 1.3.9 and later 1.3.x). mbed TLS 2.x is not currently --with-libcurl --with-libxml2 --with-openssl Different Zabbix components may be compiled with different crypto libraries (e.g. a server with OpenSSL, an agent with GnuTLS). Attention: If you plan to use pre-shared

install Building agent binaries with static libraries with GnuTLS GnuTLS depends on the Nettle crypto backend and GMP arithmetic library. Instead of using full GMP library, this guide will use mini-gmp Zabbix components using Transport Layer Security (TLS) protocol v.1.2 and 1.3 (depending on the crypto library). Certificate-based and pre-shared key-based encryption is supported. Encryption can be encryption support To support encryption Zabbix must be compiled and linked with one of the sup- ported crypto libraries: • GnuTLS - from version 3.1.18 • OpenSSL - versions 1.0.1, 1.0.2, 1.1.0, 1.1.1 • LibreSSL

with encryption support To support encryption Zabbix must be compiled and linked with one of three crypto libraries: • mbed TLS (formerly PolarSSL)(version 1.3.9 and later 1.3.x). mbed TLS 2.x is not currently --with-libcurl --with-libxml2 --with-openssl Different Zabbix components may be compiled with different crypto libraries (e.g. a server with OpenSSL, an agent with GnuTLS). Attention: If you plan to use pre-shared encryp- tion. Ciphersuites Ciphersuites are configured internally during Zabbix startup and depend on crypto library, currently they are not user-configurable. Configured ciphersuites by library type in order

com/Microsoft/go- winio 0.6.0 Required package for MongoDB plugin mongo-driver lib on Windows. golang.org/x/crypto 0.0.0 golang.org/x/sys 0.0.0 golang.org/x/text 0.3.7 1 ”Indirect” means that it is used in one github.com/youmark/pkcs8 0.0.0 Required package for MongoDB plugin mongo-driver lib. golang.org/x/crypto 0.0.0 Required package for MongoDB plugin mongo-driver lib. golang.org/x/sync 0.0.0 Required package install Building agent binaries with static libraries with GnuTLS GnuTLS depends on the Nettle crypto backend and GMP arithmetic library. Instead of using full GMP library, this guide will use mini-gmp

com/Microsoft/go- winio 0.6.0 Required package for PostgreSQL plugin on Windows. golang.org/x/crypto 0.0.0 golang.org/x/sys 0.0.0 golang.org/x/text 0.3.7 1 ”Indirect” means that it is used in one github.com/youmark/pkcs8 0.0.0 Required package for MongoDB plugin mongo-driver lib. golang.org/x/crypto 0.0.0 Required package for MongoDB plugin mongo-driver lib. golang.org/x/sync 0.0.0 Required package install Building agent binaries with static libraries with GnuTLS GnuTLS depends on the Nettle crypto backend and GMP arithmetic library. Instead of using full GMP library, this guide will use mini-gmp

install Building agent binaries with static libraries with GnuTLS GnuTLS depends on the Nettle crypto backend and GMP arithmetic library. Instead of using full GMP library, this guide will use mini-gmp Zabbix components using Transport Layer Security (TLS) protocol v.1.2 and 1.3 (depending on the crypto library). Certificate-based and pre-shared key-based encryption is supported. Encryption can be encryption support To support encryption Zabbix must be compiled and linked with one of the sup- ported crypto libraries: • GnuTLS - from version 3.1.18 • OpenSSL - versions 1.0.1, 1.0.2, 1.1.0, 1.1.1 • LibreSSL