[Csync2] initial installation howto debian: Establishing SSL connection failed

www.tiri.li high availability list-ha at tiri.eu
Fri Apr 4 11:44:38 CEST 2008


What's wrong with my debian 4 system ?
I did the following on node1 and node2

$ aptitude install csync2
$ openssl genrsa -out /etc/csync2_ssl_key.pem 1024
$ openssl req -new -key /etc/csync2_ssl_key.pem -out /etc/csync2_ssl_cert.csr
$ openssl x509 -req -days 3650 -in /etc/csync2_ssl_cert.csr \
     -signkey /etc/csync2_ssl_key.pem -out /etc/csync2_ssl_cert.pem

Then I createad the preshared key on node1

$ csync2 -k /etc/csync2.base.key

Directory Listing:
$ ls -Al /etc/csync*
-rw-r--r-- 1 root root 165 2008-04-04 10:00 /etc/csync2.cfg
-rw-r--r-- 1 root root 664 2008-04-04 09:57 /etc/csync2_ssl_cert.csr
-rw-r--r-- 1 root root 875 2008-04-04 09:58 /etc/csync2_ssl_cert.pem
-rw-r--r-- 1 root root 887 2008-04-04 09:57 /etc/csync2_ssl_key.pem
-rw------- 1 root root  65 2008-04-04 10:01 /etc/csync2.base.key

and transferred the key to the other node via scp

$ scp /etc/csync2.base.key node2:/etc

The config on both nodes is identical:

group base-csync2 {
         host node1 node2;
         key /etc/csync2.base.key;
         include /etc/csync.cfg;
         auto none;
}

Now I start the csync2 on node2 for testing:

node2$ csync2 -iii -vvv
Csync2 daemon running. Waiting for connections.

And tried a connect on node1 to node2:

node1$ csync2 -Tvvv
My hostname is node1.
Database-File: /var/lib/csync2/node1.db
Config-File:   /etc/csync2.cfg
Running in-sync check for node1 <-> node2.
Connecting to host node2 (SSL) ...
Local> SSL\n
Peer> OK (activating_ssl).\n

Node2 mentions following.

<3182> New connection from 10.1.1.1:40000.
Peer> SSL\n
Local> OK (activating_ssl).\n
<3182> Establishing SSL connection failed.

Why fails the SSL connection ?

Thanks for any help in advance.

Thomas.

http://www.tiri.li - http://www.easycluster.de

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.



More information about the Csync2 mailing list