[Csync2] Re: Csync2 Digest, Vol 32, Issue 3

[prashant]

Hi Wayne,

Have you "make cert" and then copy the key generated by "csync2 -k" 
across to your machines.

Try these manually then see what happens,

Regards,
Prashant

 
csync2-request at linbit.com wrote:
> Send Csync2 mailing list submissions to
> 	csync2 at lists.linbit.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.linbit.com/mailman/listinfo/csync2
> or, via email, send a message with subject or body 'help' to
> 	csync2-request at lists.linbit.com
>
> You can reach the person managing the list at
> 	csync2-owner at lists.linbit.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Csync2 digest..."
>
>
> Today's Topics:
>
>    1. Re: initial installation howto debian: Establishing SSL
>       connection failed (Wayne Gemmell)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 13 May 2008 11:07:26 +0200
> From: Wayne Gemmell <wayne at flashmedia.co.za>
> Subject: Re: [Csync2] initial installation howto debian: Establishing
> 	SSL	connection failed
> To: csync2 at lists.linbit.com
> Message-ID: <200805131107.26902.wayne at flashmedia.co.za>
> Content-Type: text/plain;  charset="iso-8859-1"
>
> On Friday 04 April 2008 11:44:38 www.tiri.li high availability wrote:
>   
>> Why fails the SSL connection ?
>>
>> Thanks for any help in advance.
>>     
>
> I have exactly the same problem with the same simple setup. I just thought I'd 
> chip in with a strace of the server instance hoping someone will have a 
> solution for this.
>
> <strace>
> 	open("/lib/libgpg-error.so.0", O_RDONLY) = 3
> read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P\6\0\000"..., 512) = 
> 512
> fstat64(3, {st_mode=S_IFREG|0644, st_size=11468, ...}) = 0
> mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
> 0xb7ce5000
> mmap2(NULL, 14352, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 
> 0xb7ce1000
> mmap2(0xb7ce4000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|
> MAP_DENYWRITE, 3, 0x2) = 0xb7ce4000
> close(3)                                = 0
> mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
> 0xb7ce0000
> set_thread_area({entry_number:-1 -> 6, base_addr:0xb7ce06b0, limit:1048575, 
> seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, 
> seg_not_present:0, useable:1}) = 0
> mprotect(0xb7ec2000, 4096, PROT_READ)   = 0
> munmap(0xb7fbd000, 46991)               = 0
> set_tid_address(0xb7ce06f8)             = 30366
> set_robust_list(0xb7ce0700, 0xc)        = 0
> futex(0xbfb2ec40, 0x81 /* FUTEX_??? */, 1) = 0
> rt_sigaction(SIGRTMIN, {0xb7d172c0, [], SA_SIGINFO}, NULL, 8) = 0
> rt_sigaction(SIGRT_1, {0xb7d17340, [], SA_RESTART|SA_SIGINFO}, NULL, 8) = 0
> rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
> getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
> uname({sys="Linux", node="gateway2", ...}) = 0
> brk(0)                                  = 0x805e000
> brk(0x807f000)                          = 0x807f000
> access("/etc/csync2.lock", F_OK)        = -1 ENOENT (No such file or 
> directory)
> uname({sys="Linux", node="gateway2", ...}) = 0
> socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3
> setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
> setsockopt(3, SOL_SOCKET, SO_LINGER, {onoff=1, linger=5}, 8) = 0
> setsockopt(3, SOL_TCP, TCP_NODELAY, [1], 4) = 0
> bind(3, {sa_family=AF_INET, sin_port=htons(30865), 
> sin_addr=inet_addr("0.0.0.0")}, 16) = 0
> listen(3, 5)                            = 0
> rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) = 0
> rt_sigaction(SIGCHLD, {SIG_IGN}, {SIG_DFL}, 8) = 0
> fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 1), ...}) = 0
> mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 
> 0xb7fc8000
> write(1, "Csync2 daemon running. Waiting f"..., 48Csync2 daemon running. 
> Waiting for connections.
> ) = 48
> accept(3, {sa_family=AF_INET, sin_port=htons(41044), 
> sin_addr=inet_addr("192.168.0.1")}, [16]) = 4
> clone(<30367> New connection from 192.168.0.1:41044.
> Peer> SSL\n
> Local> OK (activating_ssl).\n
> child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, 
> child_tidptr=0xb7ce06f8) = 30367
> close(4)                                = 0
> accept(3, <30367> Establishing SSL connection failed.
> </strace>
>
> Any ideas?
>
>