Bacula-users

Re: [Bacula-users] TLS negotiation handshake errors

2009-04-08 19:09:05
Subject: Re: [Bacula-users] TLS negotiation handshake errors
From: Dan Langille <dan AT langille DOT org>
To: baculalist AT encambio DOT com
Date: Wed, 08 Apr 2009 19:06:05 -0400
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

baculalist AT encambio DOT com wrote:
> Hello List,
> 
> Bacula 2.4.4 and OpenSSL 0.9.8k on Solaris x86 11 (nv-b91),
> everything is hand compiled but nothing special.
> 
>   Director hostname back1.host.com: Solaris x86 11 (nv-b91)
>   File daemon hostname back1.host.com: Solaris x86 11 (nv-b91)
> 
>   Errors seen on the director:
>   08-Apr 09:36 bacsrv-dir JobId 40: Start Backup JobId 40, 
> Job=Debut.2009-04-08_09.36.52.03
>   08-Apr 09:36 bacsrv-dir JobId 40: Using Device "FileStorage"
>   08-Apr 09:37 bacsrv-dir JobId 0: Error: openssl.c:86 Connect failure: 
> ERR=error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>   08-Apr 09:37 bacsrv-dir JobId 40: Fatal error: TLS negotiation failed with 
> FD at "back1.host.com:9102".
> 
> If I try:
> 
>   back1$ /pfx/bin/openssl s_client -connect back1.host.com:9102
>   CONNECTED(00000004)
>   10511:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake 
> failure:s23_lib.c:188:
> 
> If I try:
> 
>   back1# /pfx/bin/openssl s_server -accept 1080 -cert bacula-crt.pem -key 
> bacula-key.pem -CAfile certauth.pem
>   back1$ /pfx/bin/openssl s_client -connect back1.host.com:1080
> 
> ...everything works and TLS negotiation succeeds without errors.
> 
> By the way, an identical (same versions and config files) setup
> with two other hosts Ubuntu 8.04 server AMD64 and OpenSUSE 11
> AMD64 succeeds.
> 
> My question is, 'have you seen this (SSL3_GET_RECORD:wrong version
> number) or similar errors appearing in bacula? Any idea how to rid
> the daemons of this problem?

I Googled. I found:

http://www.mail-archive.com/bacula-users AT lists.sourceforge DOT 
net/msg04842.html

Does that help?

- --
Dan Langille

BSDCan - The Technical BSD Conference : http://www.bsdcan.org/
PGCon  - The PostgreSQL Conference:     http://www.pgcon.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkndLdwACgkQCgsXFM/7nTxOwQCgkfd7KaWBOPcvEMiTVb3aVvJg
XQQAoNF1z+SgnkchG2ky21iQIEQHWX+e
=lWLx
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users