View Issue Details

IDProjectCategoryView StatusLast Update
0001576bareos-coredirectorpublic2023-11-29 17:05
ReporterSRoederer Assigned Tobruno-at-bareos  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionno change required 
PlatformLinuxOSDebianOS Version10
Summary0001576: "TLS Require" parameter obsolete
Descriptiondirector got recently updated to from v22 to v23 via Community Repository.

This change of major version brings changes to TLS handling. As commented in 0001573 TLS is now enforced with no way of downgrade.
Therefore the "TLS Require" option of the director seems of no use and should be removed to avoid any confusion.
Additional InformationI still use a unencrypted connection to a v16.2.4-3+deb9u2 storage-daemon. Even my storage resource section contain

  TLS Enable = no
  TLS Require = no

the connection fails with

2023-11-29 14:22:47 drude-dir JobId 23040: Fatal error: Bad response to Storage command: wanted 2000 OK storage, got 2902 Bad storage
2023-11-29 14:22:47 auger-fd JobId 23040: Fatal error: Failed to authenticate Storage daemon.
2023-11-29 14:22:47 auger-fd JobId 23040: Fatal error: Tls handshake failed.
2023-11-29 14:22:47 auger-fd JobId 23040: Encryption: None
2023-11-29 14:22:47 drude-dir JobId 23040: Using Device "FileStorage" to write.
2023-11-29 14:22:47 drude-dir JobId 23040: Encryption: TLS_CHACHA20_POLY1305_SHA256 TLSv1.3
2023-11-29 14:22:47 drude-dir JobId 23040: Handshake: Immediate TLS
2023-11-29 14:22:47 drude-dir JobId 23040: Connected Client: auger-fd at 172.x.x.33:9102, encryption: TLS_CHACHA20_POLY1305_SHA256 TLSv1.3
2023-11-29 14:22:47 drude-dir JobId 23040: Probing client protocol... (result will be saved until config reload)
2023-11-29 14:22:47 drude-dir JobId 23040: Encryption: None
2023-11-29 14:22:46 drude-dir JobId 23040: Connected Storage daemon at 172.1x.x.16:9103, encryption: None
2023-11-29 14:22:46 drude-dir JobId 23040: Start Backup JobId 23040, Job=auger-docker.2023-11-29_14.22.44_12
Tagsconfiguration

Activities

bruno-at-bareos

bruno-at-bareos

2023-11-29 17:05

manager   ~0005551

You client should also have now the TLS No because of the removal of automatic downgrade.

Issue History

Date Modified Username Field Change
2023-11-29 16:40 SRoederer New Issue
2023-11-29 16:41 SRoederer Tag Attached: configuration
2023-11-29 17:05 bruno-at-bareos Assigned To => bruno-at-bareos
2023-11-29 17:05 bruno-at-bareos Status new => closed
2023-11-29 17:05 bruno-at-bareos Resolution open => no change required
2023-11-29 17:05 bruno-at-bareos Note Added: 0005551