[Csync2] initial installation howto debian: Establishing SSL
connection failed
www.tiri.li high availability
list-ha at tiri.eu
Fri Apr 4 11:44:38 CEST 2008
What's wrong with my debian 4 system ?
I did the following on node1 and node2
$ aptitude install csync2
$ openssl genrsa -out /etc/csync2_ssl_key.pem 1024
$ openssl req -new -key /etc/csync2_ssl_key.pem -out /etc/csync2_ssl_cert.csr
$ openssl x509 -req -days 3650 -in /etc/csync2_ssl_cert.csr \
-signkey /etc/csync2_ssl_key.pem -out /etc/csync2_ssl_cert.pem
Then I createad the preshared key on node1
$ csync2 -k /etc/csync2.base.key
Directory Listing:
$ ls -Al /etc/csync*
-rw-r--r-- 1 root root 165 2008-04-04 10:00 /etc/csync2.cfg
-rw-r--r-- 1 root root 664 2008-04-04 09:57 /etc/csync2_ssl_cert.csr
-rw-r--r-- 1 root root 875 2008-04-04 09:58 /etc/csync2_ssl_cert.pem
-rw-r--r-- 1 root root 887 2008-04-04 09:57 /etc/csync2_ssl_key.pem
-rw------- 1 root root 65 2008-04-04 10:01 /etc/csync2.base.key
and transferred the key to the other node via scp
$ scp /etc/csync2.base.key node2:/etc
The config on both nodes is identical:
group base-csync2 {
host node1 node2;
key /etc/csync2.base.key;
include /etc/csync.cfg;
auto none;
}
Now I start the csync2 on node2 for testing:
node2$ csync2 -iii -vvv
Csync2 daemon running. Waiting for connections.
And tried a connect on node1 to node2:
node1$ csync2 -Tvvv
My hostname is node1.
Database-File: /var/lib/csync2/node1.db
Config-File: /etc/csync2.cfg
Running in-sync check for node1 <-> node2.
Connecting to host node2 (SSL) ...
Local> SSL\n
Peer> OK (activating_ssl).\n
Node2 mentions following.
<3182> New connection from 10.1.1.1:40000.
Peer> SSL\n
Local> OK (activating_ssl).\n
<3182> Establishing SSL connection failed.
Why fails the SSL connection ?
Thanks for any help in advance.
Thomas.
http://www.tiri.li - http://www.easycluster.de
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
More information about the Csync2
mailing list