-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Dan Langille wrote:
> baculal...@encambio.com wrote:
>> Hello List,
>
>> Bacula 2.4.4 and OpenSSL 0.9.8k on Solaris x86 11 (nv-b91),
>> everything is hand compiled but nothing special.
>
>> Director hostname back1.host.com: Solaris x86 11 (nv-b91)
>> File daemon hostname back1.host.com: Solaris x86 11 (nv-b91)
>
>> Errors seen on the director:
>> 08-Apr 09:36 bacsrv-dir JobId 40: Start Backup JobId 40,
>> Job=Debut.2009-04-08_09.36.52.03
>> 08-Apr 09:36 bacsrv-dir JobId 40: Using Device "FileStorage"
>> 08-Apr 09:37 bacsrv-dir JobId 0: Error: openssl.c:86 Connect failure:
>> ERR=error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>> 08-Apr 09:37 bacsrv-dir JobId 40: Fatal error: TLS negotiation failed with
>> FD at "back1.host.com:9102".
>
>> If I try:
>
>> back1$ /pfx/bin/openssl s_client -connect back1.host.com:9102
>> CONNECTED(00000004)
>> 10511:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake
>> failure:s23_lib.c:188:
>
>> If I try:
>
>> back1# /pfx/bin/openssl s_server -accept 1080 -cert bacula-crt.pem -key
>> bacula-key.pem -CAfile certauth.pem
>> back1$ /pfx/bin/openssl s_client -connect back1.host.com:1080
>
>> ...everything works and TLS negotiation succeeds without errors.
>
>> By the way, an identical (same versions and config files) setup
>> with two other hosts Ubuntu 8.04 server AMD64 and OpenSUSE 11
>> AMD64 succeeds.
>
>> My question is, 'have you seen this (SSL3_GET_RECORD:wrong version
>> number) or similar errors appearing in bacula? Any idea how to rid
>> the daemons of this problem?
>
> I Googled. I found:
>
> http://www.mail-archive.com/bacula-users@lists.sourceforge.net/msg04842.html
>
> Does that help?
Having done this myself (and having had the good sense to Google it, I
might add ;)), I concur -- this is very likely the problem.
- --
---- _ _ _ _ ___ _ _ _
|Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II
|$&| |__| | | |__/ | \| _| |novos...@umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent.|IST/CST - NJMS Medical Science Bldg - C630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkndLpsACgkQmb+gadEcsb4v9QCgi3+Y2xdMGsjI4HOIubg+eCMC
bPgAn32yP23APNGb4R2EGFqvumYKJZot
=nNUO
-----END PGP SIGNATURE-----
begin:vcard
fn:Ryan Novosielski
n:Novosielski;Ryan
org:UMDNJ;IST/AST
adr;dom:MSB C630;;185 South Orange Avenue;Newark;NJ;07103
email;internet:novos...@umdnj.edu
title:Systems Programmer II
tel;work:(973) 972-0922
tel;fax:(973) 972-7412
tel;pager:(866) 20-UMDNJ
x-mozilla-html:FALSE
version:2.1
end:vcard
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
