On 03/20/2018 06:37 AM, Chris Dos wrote:
> On 03/20/2018 02:35 AM, Philipp Storz wrote:
>> To work with older clients is to disable TLS PSK
>>
>> by setting
>>
>> TlsPsk Enable = no
>
> My bad. There should be a space in there and it is in the documentation:
> TLS Psk Enable = no
I've added both
TLS Psk Enable = no
TLS Psk Require = no
to the director config and the older clients are still not able to connect.
I also have one 18.1.3 client that cannot connect running on Server 2008 R2:
Backup log:
20-Mar 08:47 fatman-dir JobId 2850: Start Backup JobId 2850,
Job=Backup_Shoretel_Daily.2018-03-20_08.47.38_14
20-Mar 08:47 fatman-dir JobId 2850: Secure connection to Storage daemon at
fatman:9103 with cipher PSK-AES256-CBC-SHA established
20-Mar 08:47 fatman-dir JobId 2850: Using Device "vchanger_8tb_drive_0" to
write.
20-Mar 08:47 fatman-sd JobId 2850: Error: lib/crypto_openssl.cc:1560 Connect
failure: ERR=error:1408B0DF:SSL routines:SSL3_GET_CLIENT_KEY_EXCHANGE:psk
identity not found
20-Mar 08:47 shortel-fd JobId 2850: Created 24 wildcard excludes from
FilesNotToBackup Registry key
20-Mar 08:47 fatman-sd JobId 2850: Fatal error: lib/bnet.cc:134 TLS
Negotiation failed.
20-Mar 08:47 fatman-sd JobId 2850: Fatal error: TLS negotiation failed.
20-Mar 08:47 fatman-sd JobId 2850: Fatal error: stored/authenticate.cc:188
Authorization problem: Two way security handshake failed with File daemon at
client
20-Mar 08:47 fatman-sd JobId 2850: Fatal error: Unable to authenticate File
daemon
20-Mar 08:47 shortel-fd JobId 2850: Error: lib/crypto_openssl.cc:1560 Connect
failure: ERR=error:1409445B:SSL routines:ssl3_read_bytes:reason(1115)
20-Mar 08:47 shortel-fd JobId 2850: Fatal error: TLS negotiation failed.
Windows Event Log:
lib/bsock_tcp.cc:409 Write error sending 28 bytes to client:127.0.0.1:9102:
ERR=Input/output error
lib/bsock_tcp.cc:454 Socket has errors=1 on call to client:127.0.0.1:9102
Chris
--
You received this message because you are subscribed to the Google Groups
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
For more options, visit https://groups.google.com/d/optout.
