how to setup encrypted connection to server

[unclesam87]

hey thanks for ur work, but i am confused:
how do i setup an encrypted connection to my checkmk server?

[kohly]

at least, if nothing other works: deny access to 6556/tcp on any if but lo and create a rule for agent access by "ssh 'telnet localhost 6556'

[doctore74]

at least, if nothing other works: deny access to 6556/tcp on any if but lo and create a rule for agent access by "ssh 'telnet localhost 6556'

I would use nc instead of telnet.

[doctore74]

hey thanks for ur work, but i am confused: how do i setup an encrypted connection to my checkmk server?

Not possible AFAIK

[kohly]

hey thanks for ur work, but i am confused: how do i setup an encrypted connection to my checkmk server?

Not possible AFAIK

user@host:~$ ssh opnsense "sudo nc localhost 6556" | head
<<<check_mk>>>
AgentOS: OPNsense
Version: 1.0.7
Hostname: opnsense
LocalDirectory: /usr/local/check_mk_agent/local
PluginsDirectory: /usr/local/check_mk_agent/plugins
AgentDirectory: /usr/local/etc
SpoolDirectory: /usr/local/check_mk_agent/spool
<<>>
0.68 0.59 0.53 1/68 13145 2
...

[thorstenspille]

The agent supports encrytion via PSK. Just create the file /usr/local/etc/checkmk.conf and insert:
encrypt: <your-encryption-key>

[kohly]

The agent supports encrytion via PSK. Just create the file /usr/local/etc/checkmk.conf and insert: encrypt: <your-encryption-key>

how do i create the 'your-encryption-key'?

[thorstenspille]

Thats part of the checkmk documentation:
https://docs.checkmk.com/latest/en/agent_linux_legacy.html#encryption