[Csync2] Identification failed?

[Marcus Bointon]

I'm still having no success with csync2, getting errors like this on  
every file between 2 nodes named www1 and www2 using csync2 -dxvvv:

Local> HELLO www2\n
Peer> Identification failed!\n
While syncing file /var/www/site.css:
ERROR from peer www1: Identification failed!
Local> BYE\n
Peer> OK (cu_later).\n

So the servers can see each other, but identification is failing.
I've seen various comments about generating ssl keys in batch mode, so  
I recreated my keys like so:

openssl genrsa -out /etc/csync2_ssl_key.pem 1024
openssl req -batch -new -key /etc/csync2_ssl_key.pem -out /etc/ 
csync2_ssl_cert.csr
openssl x509 -req -days 2000 -in /etc/csync2_ssl_cert.csr -signkey / 
etc/csync2_ssl_key.pem -out /etc/csync2_ssl_cert.pem

Initially csync2 gave me a certificate mismatch error (I guess because  
a previously cached cert was not the same as the new one), so I  
trashed the contents of the x509_cert table in the csync2 database on  
both nodes and the problem went away, and after a connection attempt I  
can see that the new certs are in the db (though it looks like they  
are hex encoded rather than base-64).

I'm now just left with this "Identification failed" problem. It seems  
that the connection works, the SSL certs line up, the hostnames match  
(I can ssh to each one from the other using just the hostname and each  
matches the output of the hostname command, IPs are set correctly in a  
hosts file), I can telnet from one to the other on port 30865 (so no  
firewall issues), nodes are using the same pre-shared key file.  
Turning off SSL between those nodes made no difference (using "nossl  
www1 www2; nossl www2 www1;"). What else could be wrong?

I'm using the csync2_1.29-3_i386.deb package on Ubuntu 6.06.1.

Marcus
-- 
Marcus Bointon
Synchromedia Limited: Creators of http://www.smartmessages.net/
UK resellers of info at hand CRM solutions
marcus at synchromedia.co.uk | http://www.synchromedia.co.uk/