From a02a88579eb01a604090dfce0d6c75331855ec16 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Zolt=C3=A1n=20Bedi?= Date: Tue, 25 Mar 2025 12:12:18 +0100 Subject: [PATCH] Fix: TLS handshake timeout caused by go 1.23 (#1997) --- .changeset/smart-pears-change.md | 5 +++++ CHANGELOG.md | 2 -- go.mod | 6 ++++++ 3 files changed, 11 insertions(+), 2 deletions(-) create mode 100644 .changeset/smart-pears-change.md diff --git a/.changeset/smart-pears-change.md b/.changeset/smart-pears-change.md new file mode 100644 index 0000000..8408002 --- /dev/null +++ b/.changeset/smart-pears-change.md @@ -0,0 +1,5 @@ +--- +'grafana-zabbix': patch +--- + +Fix: TLS handshake timeout issues by disabling post-quantum key exchange mechanism in go diff --git a/CHANGELOG.md b/CHANGELOG.md index d4b1bf9..486b2e8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,8 +2,6 @@ ## 5.0.3 -### Patch Changes - 🐛 Security: Update golang.org/x/net from v0.35.0 to v0.37.0 ⚙️ Chore: Build plugin with go 1.24.1 🐛 Fix: Basic authentication in zabbix <7.2 diff --git a/go.mod b/go.mod index d044d13..760fecb 100644 --- a/go.mod +++ b/go.mod @@ -2,6 +2,12 @@ module github.com/alexanderzobnin/grafana-zabbix go 1.24 +// Go 1.24 enabled the post-quantum key exchange mechanism +// X25519MLKEM768 by default. It can cause issues with some TLS servers +// that do not handle large records correctly. +// It can be disabled using the following command: +godebug tlsmlkem=0 + require ( github.com/bitly/go-simplejson v0.5.1 github.com/dlclark/regexp2 v1.10.0