Hello,

I have some problems to connect from Bacula director to a Bacula client with TLS. Here some details:

I use as Bacula director SuSE Linux Enterprise Server (SLES) 11 SP2 (with Bacula version 5.2.6-1.1 and OpenSSL version 0.9.8j-0.26.1). Then I do a successfully backup job to a Debian Squeeze client (Bacula version 5.0.2-2.2 und OpenSSL version 0.9.8o-4). But the second backup job to a Debian Wheezy client (Bacula version 5.2.6+dfsg-8 und OpenSSL version 1.0.1e-2) fails with following message:

 

09-Apr 13:23 baculaclient JobId 690: Error: openssl.c:86 Connect failure: ERR=error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
09-Apr 13:23 bacula-sd JobId 690: Error: openssl.c:86 Connect failure: ERR=error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
09-Apr 13:23 bacula-sd JobId 690: Fatal error: bnet.c:287 TLS Negotiation failed.
09-Apr 13:23 baculaclient JobId 690: Fatal error: TLS negotiation failed.
09-Apr 13:23 bacula-sd JobId 690: Fatal error: TLS negotiation failed with FD at "192.168.1.10:9103"
09-Apr 13:23 bacula-sd JobId 690: Fatal error: Incorrect authorization key from File daemon at client rejected.
Please see http://www.bacula.org/en/rel-manual/Bacula_Freque_Asked_Questi.html#SECTION003760000000000000000 for help.
09-Apr 13:23 bacula-sd JobId 690: Fatal error: Unable to authenticate File daemon
09-Apr 13:23 baculaclient JobId 690: Fatal error: Failed to authenticate Storage daemon.
09-Apr 13:23 bacula-dir JobId 690: Fatal error: Bad response to Storage command: wanted 2000 OK storage

 

So I think that the OpenSSL package has an error or (could be) an new feature that I don't know.
Does anybody got similar error? Thanks for help.

 

Peter