Hi,

I'm trying to setup a TLS connection between one external FD and
the director. Running status on the client results in

03-Jan 16:12 epistaxis-dir: ERROR in openssl.c:74 Connect failure: 
ERR=error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure
03-Jan 16:12 epistaxis-dir: *Console*.2008-01-03_16.12.28 Fatal error: TLS 
negotiation failed with FD on "[Hostname]:9102".

FD and DIR are running 2.0.3.
A connection with openssl s_client/s_server and the relevant key/dir/CA files 
as used by the bacula configuration
is working perfectly.

Configuration:
----------------------
bacula-fd.conf on [Hostname]
Director {
  Name = epistaxis-dir
  Password = "[Password]"

  TLS Enable = yes
  TLS Require = yes
  TLS Certificate = /etc/bacula/certs/[EMAIL PROTECTED]
  TLS Key = /etc/bacula/certs/[EMAIL PROTECTED]
  TLS CA Certificate File = /etc/ssl/certs/cacert.pem
}

bacula-dir.conf on epistaxis
Client {
     TLS Enable = yes
     TLS Require = yes
     TLS CA Certificate File = /etc/ssl/certs/cacert.pem

  Name = [Hostname]-fd
  Address = [Hostname]
  FDPort = 9102
  ...
}

Director {
  Name = epistaxis-dir
  DIRport = 9101
        TLS Enable = yes
        TLS CA Certificate File = /etc/ssl/certs/cacert.pem
        TLS Certificate = /etc/bacula/certs/[EMAIL PROTECTED]
        TLS Key = /etc/bacula/certs/[EMAIL PROTECTED]
}

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to