Re: [staf-users] Problem with ssl

[<jan...@ta...>]

It worked! Thanks a lot for helping!

/jan

Sharon Lucas wrote:
> On one of our AIX 6.1 machines with STAF V3.4.5 installed (using the STAF 
> installation binaries provided via the STAF SourceForge webiste), we see 
> the following (note that libssl.so and libcrypto.so are OpenSSL libraries 
> and they reside in the /usr/local/staf/lib directory as they are packaged 
> with the STAF installation binaries):
> 
> # ldd libSTAFTCP.so
> libSTAFTCP.so needs:
>          /usr/lib/libpthread.a(shr_comm.o)
>          /usr/lib/libpthread.a(shr_xpg5.o)
>          /usr/local/staf/lib/libSTAF.so
>          /usr/local/staf/lib/libssl.so
>          /usr/local/staf/lib/libcrypto.so
>          /usr/vacpp/lib/libC.a(shr.o)
>          /usr/vacpp/lib/libC.a(ansi_32.o)
>          /usr/lib/libc.a(shr.o)
>          /usr/lib/librtl.a(shr.o)
>          /usr/lib/libpthreads.a(shr_comm.o)
>          /unix
>          /usr/lib/libdl.a(shr.o)
>          /usr/vacpp/lib/libC.a(shr2.o)
>          /usr/vacpp/lib/libC.a(ansicore_32.o)
>          /usr/vacpp/lib/libC.a(shrcore.o)
>          /usr/vacpp/lib/libC.a(shr3.o)
>          /usr/lib/libcrypt.a(shr.o)
> 
> Note that your ldd output doesn't include the two OpenSSL libraries 
> packaged with STAF (/usr/local/staf/lib/libssl.so and 
> /usr/local/staf/lib/libcrypto.so).
> 
> When building STAF yourself for AIX 4.3, you should have followed the 
> instructions for building STAF in the STAF Developer's Guide at 
> http://staf.sourceforge.net/current/stafdg.html#Header_buildOpenSSL. 
> Section "Building SSL" says:
> 
> Download OpenSSL 0.9.8 source code from the OpenSSL website. Note that we 
> used OpenSSL 0.9.8e when we built the STAF binaries, though the STAFTCP 
> connection provider *should* work with any OpenSSL 0.9.8 version. 
> 
> However, you said you built STAF using openssl-1.0.0d.  I suppose this 
> could be causing the problem since this version of OpenSSL is later than 
> the 0.9.8 versions that STAF supports and that I'm guessing you have 
> installed on your Linux systems to which you're trying to submit a STAF 
> service request.  You should probably google for more information on the 
> OpenSSL error you're getting:   error:1408F10B:SSL 
> routines:SSL3_GET_RECORD:wrong version number
> 
> Otherwise, I recommend building STAF for AIX 4.3 using OpenSSL 0.9.8e (not 
> OpenSSL 1.0.0d). 
> 
> Or, why not use the STAF installation binaries for STAF V3.3.2 for AIX 
> which support AIX 4.3.3 (instead of building STAF yourself).
> 
> Note that there have been some fixes made to the STAF ssl interface code 
> after STAF V3.3.2.
> 
> Or, as a workaround, you could try commenting out the ssl interface in the 
> /usr/local/staf/bin/STAF.cfg file on your AIX machine so that the tcp 
> interface is used instead of the ssl interface to communicate with other 
> STAF machines.
> 
> Also, maybe you are running into a problem where the port number (6550) 
> that the STAF ssl interface uses is being blocked via a firewall.  Section 
> "3.1.4 Why can't my STAF machines communicate?" in the STAF FAQ at 
> http://staf.sourceforge.net/current/STAFFAQ.htm#STAF%20machines%20can%27t%20communicate%20due%20to%20DNS%20issues 
> talks about how to resolve this issue.
> 
> --------------------------------------------------------------
> Sharon Lucas
> IBM Austin,   lu...@us...
> (512) 286-7313 or Tieline 363-7313
> 
> 
> 
> 
> From:   "jan...@ta..." <jan...@ta...>
> To:     staf <sta...@li...>
> Date:   04/26/2011 10:23 AM
> Subject:        [staf-users] Problem with ssl
> 
> 
> 
> System: AIX 4.3
> SSL: openssl-1.0.0d, compiled from source
> STAF: STAF 3.3.2, built from source
> 
> I can't communicate with other servers - here on Debian Linux; I get 
> the following message on the remote server:
> 
> STAFProc version 3.3.2 initialized
> 20110426-17:41:53;1086876560;00000100;Error in server SSL handshake 
> originating from machine intranet.informatica.com.  A possible cause 
> is a non-secure tcp interface submitted a request to a secure tcp 
> interface which is not supported.  error:1408F10B:SSL 
> routines:SSL3_GET_RECORD:wrong version number
> 
> I assume this is routed through libSTAFTCP.so, but I can't see it 
> referring to libssl:
> 
> monodon # ldd libSTAFTCP.so
> /usr/lib/librtl.a(shr.o)
> /usr/lpp/xlC/lib/libC.a(shr3.o)
> /usr/lpp/xlC/lib/libC.a(shr2.o)
> /usr/lpp/xlC/lib/libC.a(ansi_32.o)
> /usr/lpp/xlC/lib/libC.a(shr.o)
> /usr/lib/libdl.a(shr.o)
> /usr/lib/libpthreads.a(shr_comm.o)
> /usr/lib/libpthreads.a(shr_xpg5.o)
> /usr/local/staf/lib/libSTAF.so
> /usr/local/staf/lib/libSTAFTCP.so
> /usr/lib/libcrypt.a(shr.o)
> /usr/lib/libc.a(shr.o)
> 
> How do I proceed from here - any suggestions? Using a newer version of 
> STAF is not an option, and I have to get it working on this system.
> 
> /jan
> 
> ------------------------------------------------------------------------------
> WhatsUp Gold - Download Free Network Management Software
> The most intuitive, comprehensive, and cost-effective network 
> management toolset available today.  Delivers lowest initial 
> acquisition cost and overall TCO of any competing solution.
> http://p.sf.net/sfu/whatsupgold-sd
> _______________________________________________
> staf-users mailing list
> sta...@li...
> https://lists.sourceforge.net/lists/listinfo/staf-users
> 
>