Zabbix

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

#include "proxypoller.h"

​

#include "proxyconfigread/proxyconfigread.h"

#include "trapper/trapper_server.h"

#include "cachehistory/cachehistory_server.h"

#include "discovery/discovery_server.h"

#include "autoreg/autoreg_server.h"

​

#include "zbxexpression.h"

#include "zbxdbwrap.h"

#include "zbxnix.h"

#include "zbxself.h"

#include "zbxdbhigh.h"

#include "zbxlog.h"

#include "zbxcompress.h"

#include "zbxrtc.h"

#include "zbxcommshigh.h"

#include "zbxnum.h"

#include "zbxtime.h"

#include "zbxversion.h"

#include "zbx_rtc_constants.h"

#include "zbxcacheconfig.h"

#include "zbxipcservice.h"

#include "zbxjson.h"

​

static zbx_get_program_type_f       zbx_get_program_type_cb = NULL;

​

static int  connect_to_proxy(const zbx_dc_proxy_t *proxy, zbx_socket_t *sock, int timeout,

        const char *config_source_ip)

{

    int     ret = FAIL;

    const char  *tls_arg1, *tls_arg2;

​

    zabbix_log(LOG_LEVEL_DEBUG, "In %s() address:%s port:%hu timeout:%d conn:%u", __func__, proxy->addr,

            proxy->port, timeout, (unsigned int)proxy->tls_connect);

​

    switch (proxy->tls_connect)

    {

        case ZBX_TCP_SEC_UNENCRYPTED:

            tls_arg1 = NULL;

            tls_arg2 = NULL;

            break;

#if defined(HAVE_GNUTLS) || defined(HAVE_OPENSSL)

        case ZBX_TCP_SEC_TLS_CERT:

            tls_arg1 = proxy->tls_issuer;

            tls_arg2 = proxy->tls_subject;

            break;

        case ZBX_TCP_SEC_TLS_PSK:

            tls_arg1 = proxy->tls_psk_identity;

            tls_arg2 = proxy->tls_psk;

            break;

#else

        case ZBX_TCP_SEC_TLS_CERT:

        case ZBX_TCP_SEC_TLS_PSK:

            zabbix_log(LOG_LEVEL_ERR, "TLS connection is configured to be used with passive proxy \"%s\""

                    " but support for TLS was not compiled into %s.", proxy->name,

                    get_program_type_string(zbx_get_program_type_cb()));

            ret = CONFIG_ERROR;

            goto out;

#endif

        default:

            THIS_SHOULD_NEVER_HAPPEN;

            goto out;

    }

​

    if (FAIL == (ret = zbx_tcp_connect(sock, config_source_ip, proxy->addr, proxy->port, timeout,

            proxy->tls_connect, tls_arg1, tls_arg2)))

    {

        zabbix_log(LOG_LEVEL_ERR, "cannot connect to proxy \"%s\": %s", proxy->name, zbx_socket_strerror());

        ret = NETWORK_ERROR;

    }

out:

    zabbix_log(LOG_LEVEL_DEBUG, "End of %s():%s", __func__, zbx_result_string(ret));

​

    return ret;

}

​