View Issue Details

IDProjectCategoryView StatusLast Update
0001615unrealircdpublic2004-03-07 20:18
ReporterMichaelJE2 Assigned To 
PrioritynormalSeveritymajorReproducibilityrandom
Status closedResolutionopen 
Product Version3.2-RC1 
Summary0001615: SSL delink
DescriptionThe servers delink randomly, and here's the error.

--- *** Notice -- (link) Secure link american.xcelor8.com -> tim.xcelor8.com[@65.75.154.80.0] established (SSLv3-AES256-SHA-256bits)
--- (link) Secure link tim.xcelor8.com -> american.xcelor8.com[@65.30.227.224.63170] established (SSLv3-AES256-SHA-256bits)
--- *** Notice -- Link tim.xcelor8.com -> american.xcelor8.com is now synced [secs: 4153 recv: 3.578 sent: 8.516]
--- (sync) Possible negative TS split at link american.xcelor8.com (1078284965 - 1078289118 = -4153)
--- (sync) Link american.xcelor8.com -> tim.xcelor8.com is now synced [secs: -4153 recv: 8.438 sent: 3.578]
--- Exiting ssl client tim.xcelor8.com[@65.75.154.80.0]: SSL_read(): Underlying syscall error
Additional InformationThis has happened two or three times.
3rd party modules

Activities

syzop

2004-03-02 23:01

administrator   ~0005282

That's probably a normal error (eg: 'connection reset by peer') but not visible thanks to SSL.
Try applying this patch from www.vulnscan.org/tmp/ssl_syscallerr.patch (wget it... and do: 'cat ssl_syscallerr.patch|patch -p0' from your UnrealIRCd dir and run 'make'), it should give a more verbose error msg.
[oh I might be wrong, I wrote this in a rush ;p]

codemastr

2004-03-02 23:10

reporter   ~0005283

Unrelated, but you really should do something about that TS difference as well. That can result in massive desynch. Anything above like ~3 seconds is a lot, 4000+ is just insane!

MichaelJE2

2004-03-02 23:28

reporter   ~0005284

(in responce to codemastr)
I don't fully understand what ts is, I think it's time stamp, and if so, my server's clock is way off, and I can't get into the bios (no monitor) and I don't know the unix command to set it. It's off by about an hour.

MichaelJE2

2004-03-02 23:31

reporter   ~0005285

(in responce to syzop)
I just installed the patch. I'll wait untill it delinks again (I think it will, but I'm not sure) then I'll give you the output.

MichaelJE2

2004-03-02 23:51

reporter   ~0005286

I found the command to fix the clock, now I have a desync of -3. I guess it was the timestamp.

syzop

2004-03-07 20:18

administrator   ~0005342

extra errormsg info is in cvs / rc2 I believe

Issue History

Date Modified Username Field Change
2004-03-02 22:42 MichaelJE2 New Issue
2004-03-02 23:01 syzop Note Added: 0005282
2004-03-02 23:10 codemastr Note Added: 0005283
2004-03-02 23:28 MichaelJE2 Note Added: 0005284
2004-03-02 23:31 MichaelJE2 Note Added: 0005285
2004-03-02 23:51 MichaelJE2 Note Added: 0005286
2004-03-07 20:18 syzop Status new => closed
2004-03-07 20:18 syzop Note Added: 0005342