[Box Backup] SSL problem

[Tobias Balle-Petersen]

Hello.

Make sure the time on the store and client are syncronized.

Tobias

Ricardo Kuznik - aciComputer wrote:
> Hello List!
> 
> I try to install boxbackup, but something is wrong with SSL (openSSL
> 0.9.7e is on both machines)
> 
> 
> Here are the commands, I executed:
> Server:
> raidfile-config /etc/box 4096
> bbstored-config /etc/box 192.168.1.163 _bbstored
> bbstored-certs ca init
> bbstored-certs ca sign-server  /etc/box/bbstored/192.168.1.163-csr.pem
> cp -a ca/servers/192.168.1.163-cert.pem /etc/box/bbstored/
> cp -a ca/roots/clientCA.pem /etc/box/bbstored/
> /usr/local/bin/bbstored
> 
> 
> /var/log/messages said:
> Jun  8 13:34:10 linux bbstored[8501]: Starting daemon (config:
> /etc/box/bbstored.conf) (version 0.10)
> Jun  8 13:34:10 linux bbstored/hk[8502]: Housekeeping process started
> Jun  8 13:34:10 linux bbstored/hk[8502]: Starting housekeeping
> Jun  8 13:34:10 linux bbstored/hk[8502]: Finished housekeeping
> 
> I think it is everything OK.
> 
> Then the Client:
> 
> /usr/local/bin/bbackupd-config /etc/box lazy 115 192.168.1.163 /
> scp /etc/box/bbackupd/115-csr.pem 192.168.1.163:/
> 
> Server:
> bbstored-certs ca sign 1-csr.pem
> 
> Client:
> scp 192.168.1.163:/ca/clients/115-cert.pem /etc/box/bbackupd
> scp 192.168.1.163:/ca/roots/serverCA.pem /etc/box/bbackupd
> 
> /varlog/messages
> 
> Jun  8 14:05:54 acimail3 bbackupd[13579]: Starting daemon (config:
> /etc/box/bbackupd.conf) (version 0.10)
> Jun  8 14:05:54 acimail3 bbackupd[13579]: Beginning scan of local files
> Jun  8 14:05:54 acimail3 bbackupd[13579]: Opening connection to server
> 192.168.1.163...
> Jun  8 14:05:55 acimail3 bbackupd[13579]: SSL err during Connect:
> error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
> verify failed
> Jun  8 14:05:55 acimail3 bbackupd[13579]: Exception caught (Connection
> TLSHandshakeFailed 7/30), reset state and waiting to retry...
> Jun  8 14:06:05 acimail3 bbackupd[13579]: File statistics: total file
> size uploaded 0, bytes already on server 0, encoded size 0
> 
> Why failed the verifying? What did I wrong!
> 
> Thank you for every feeddback and help!
> 
> Greetings, R. Kuznik
> 
>