[Box Backup] SSL problem

Ricardo Kuznik - aciComputer boxbackup@fluffy.co.uk
Fri, 8 Jun 2007 14:24:27 +0200


Hello List!

I try to install boxbackup, but something is wrong with SSL (openSSL 
0.9.7e is on both machines)


Here are the commands, I executed:
Server:
raidfile-config /etc/box 4096
bbstored-config /etc/box 192.168.1.163 _bbstored
bbstored-certs ca init
bbstored-certs ca sign-server  /etc/box/bbstored/192.168.1.163-csr.pem
cp -a ca/servers/192.168.1.163-cert.pem /etc/box/bbstored/
cp -a ca/roots/clientCA.pem /etc/box/bbstored/
/usr/local/bin/bbstored


/var/log/messages said:
Jun  8 13:34:10 linux bbstored[8501]: Starting daemon (config: 
/etc/box/bbstored.conf) (version 0.10)
Jun  8 13:34:10 linux bbstored/hk[8502]: Housekeeping process started
Jun  8 13:34:10 linux bbstored/hk[8502]: Starting housekeeping
Jun  8 13:34:10 linux bbstored/hk[8502]: Finished housekeeping

I think it is everything OK.

Then the Client:

/usr/local/bin/bbackupd-config /etc/box lazy 115 192.168.1.163 /
scp /etc/box/bbackupd/115-csr.pem 192.168.1.163:/

Server:
bbstored-certs ca sign 1-csr.pem

Client:
scp 192.168.1.163:/ca/clients/115-cert.pem /etc/box/bbackupd
scp 192.168.1.163:/ca/roots/serverCA.pem /etc/box/bbackupd

/varlog/messages

Jun  8 14:05:54 acimail3 bbackupd[13579]: Starting daemon (config: 
/etc/box/bbackupd.conf) (version 0.10)
Jun  8 14:05:54 acimail3 bbackupd[13579]: Beginning scan of local files
Jun  8 14:05:54 acimail3 bbackupd[13579]: Opening connection to server 
192.168.1.163...
Jun  8 14:05:55 acimail3 bbackupd[13579]: SSL err during Connect: 
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate 
verify failed
Jun  8 14:05:55 acimail3 bbackupd[13579]: Exception caught (Connection 
TLSHandshakeFailed 7/30), reset state and waiting to retry...
Jun  8 14:06:05 acimail3 bbackupd[13579]: File statistics: total file 
size uploaded 0, bytes already on server 0, encoded size 0

Why failed the verifying? What did I wrong!

Thank you for every feeddback and help!

Greetings, R. Kuznik


-- 


Mit freundlichen Grüßen,

Ricardo Kuznik
aci Computer Innovationsgesellschaft mbH Anhalt

Tel.: 0340-26069-31
Fax: 0340-2400141
Mail: r.kuznik@aci-anhalt.de
Web: www.aci-anhalt.de
------------------------------------------
Geschäftsführer: Ing. Jörg Plötz, Dipl.-Phys. Joachim von Below
Sitz: Seelmannstr. 2, 06847 Dessau
Amtsgericht Stendal, HRB Nr. 14051
------------------------------------------

____________
Virus checked by G DATA AntiVirusKit
Version: AVK 17.4039 from 17.04.2007
Virus news: www.antiviruslab.com