<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-family: Calibri, sans-serif; "><div style="font-size: 14px; ">Hi,</div><div style="font-size: 14px; "><br></div><div style="font-size: 14px; ">I am trying to configure csync2 on a couple of OpenSuse 12.1 nodes, but I'm having a problem with respect to TLS handshaking. I've added an entry to /etc/services as was required in the Csync paper (csync2 30865/tcp # Csync2 service) and I've configured xinetd to enable the service. The service appears to start without any issues, until I actually perform a "csync2 –xv" operation. Then I get the following error:</div><div style="font-size: 14px; "><br></div><div style="font-size: 14px; "><blockquote style="margin:0 0 0 40px; border:none; padding:0px;"><div>node1:/etc/csync2 # csync2 -xv</div><div>Connecting to host node2 (SSL) ...</div><div>WARNING: no socket to connect to</div><div>Received record packet of unknown type 87</div><div>SSL: handshake failed: An unexpected TLS packet was received. (GNUTLS_E_UNEXPECTED_PACKET)</div></blockquote></div><blockquote style="margin:0 0 0 40px; border:none; padding:0px;"><div style="font-size: 14px; "><br></div></blockquote><div>I thought maybe my SSL certificates may have been malformed, so I regenerated them using these steps :</div><div><br></div><div><blockquote style="margin:0 0 0 40px; border:none; padding:0px;"><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><font class="Apple-style-span" size="3"><span style="font-family: Calibri; "> </span><span style="font-family: Calibri; ">openssl genrsa \</span></font></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">-out /etc/csync2_ssl_key.pem 1024</font></span></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">openssl req -new \</font></span></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">-key /etc/csync2_ssl_key.pem \</font></span></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">-out /etc/csync2_ssl_cert.csr</font></span></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">openssl x509 -req -days 600 \</font></span></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">-in /etc/csync2_ssl_cert.csr \</font></span></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">-signkey /etc/csync2_ssl_key.pem \</font></span></p>
<p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">-out /etc/csync2_ssl_cert.pem</font></span></p></blockquote><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3"><br></font></span></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">But that also didn't fix the problem. And help is greatly appreciated.</font></span></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3"><br></font></span></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">Thanks in advance,</font></span></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3"><br></font></span></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3">Mike</font></span></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Helvetica; "><span style="font-family: Calibri; "><font class="Apple-style-span" size="3"><br></font></span></p><p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 10.0px Helvetica"><br></p></div></body></html>