Zabbix 4 Network Monitoring - Third Edition

Being our own authority

We'll start by creating the certificates in a separate directory. For simplicity's sake, let's do this on A test host;, choose any directory where our certificate signing will happen.

The following is not intended to be a good practice. It's actually doing quite a few bad and insecure things to get the certificates faster. Don't follow these steps for any production setup.

Let's create a folder with our own certificates that we can use to encrypt our traffic.

$ mkdir zabbix_ca$ chmod 700 zabbix_ca$ cd zabbix_ca

Generate the root CA key:

$ openssl genrsa -aes256 -out zabbix_ca.key 4096

When prompted, enter a password twice to protect the key. Generate and self-sign the root certificate:

$ openssl req -x509 -new -key ...