You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

PSK requires Stunnel version 5.09 or higher. For an example of setting up authentication using PSK, see https://www.stunnel.org/auth.html. Note that the minimum PSK key length is 20 chars. Use the following steps to enable PSK for Agents.

  1. Change PSK key file owner and group to ‘uptimeagent’, for example:

    chown uptimeagent /opt/uptime-agent/conf/psk.txt
chgrp uptimeagent /opt/uptime-agent/conf/psk.txt

    The following is an example of Stunnel configuration for the PSK support:

    exec = /opt/uptime-agent/bin/uptimeagent
options = NO_SSLv2
options = NO_SSLv3
options = NO_TLSv1
options = NO_TLSv1.1
 
ciphers=PSK
PSKsecrets=/opt/uptime-agent/conf/psk.txt
PSKidentity=test1

    Example of content of /opt/uptime-agent/conf/psk.txt:
test1:qqtest11qqtest11qqtest11

  2. When adding Agents to the Monitoring Station, be sure to select Use SSL, Use TLS-PSK and specify PSK identity/key or enable corresponding options on the Global Credentials Settings page. On the Global Credentials Settings page, configure the list of PSK identities and keys for specific IP addresses or IP ranges. These identities and keys will be used when the Use uptime Agent Global Configuration option is selected.

  • No labels