Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Wed Nov 03, 2010 4:09 pm 
Offline
Senior Member

Joined: Sat Nov 15, 2008 4:24 pm
Posts: 55
Location: Czech Republic
Hello, I am trying hard to set up SQL replication but without any luck.

I can connect from Gentoo (5.1.50) to Ubuntu (5.1.49) but not the other way around. All I get is SQL connection error.

The important note - I am not entire newbie, so I have correct certificate paths, permissions, CAs, firewall, ...

I suspect that Ubuntu/Debian is not compiled with OpenSSL support and there is some misunderstanding between yassl and OpenSSL.

So I would like to ask anybody if they encountered/solved this issue berofe and whether somebody would by willing to assist me.

Just try following and let me know:
mysql -h mechanus.planescape.cz -u root --ssl --ssl-ca cacert.pem

SSL connection error is bad. Access denied is good. Ubuntu/Debian gives me first one, Gentoo second one. Other distro results are appreciated. (and ldd `which mysql`).


cacert.pem (StartCom Class 2 Intermediate)
Code:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


Top
   
 Post subject:
PostPosted: Wed Nov 03, 2010 4:14 pm 
Offline
Senior Member

Joined: Sat Nov 15, 2008 4:24 pm
Posts: 55
Location: Czech Republic
For those interested in trace:

Code:
T@6    : >login_connection
T@6    : | info: login_connection called by thread 4
T@6    : | >my_net_set_read_timeout
T@6    : | | enter: timeout: 10
T@6    : | <my_net_set_read_timeout
T@6    : | >my_net_set_write_timeout
T@6    : | | enter: timeout: 10
T@6    : | <my_net_set_write_timeout
T@6    : | info: New connection received on TCP/IP (75)
T@6    : | >vio_peer_addr
T@6    : | | enter: sd: 75
T@6    : | | exit: addr: 193.107.161.43
T@6    : | <vio_peer_addr
T@6    : | >_mymalloc
T@6    : | | enter: Size: 15
T@6    : | | exit: ptr: 0xb7e719b0
T@6    : | <_mymalloc
T@6    : | >vio_in_addr
T@6    : | <vio_in_addr
T@6    : | >vio_in_addr
T@6    : | <vio_in_addr
T@6    : | >ip_to_hostname
T@6    : | | >my_hash_first
T@6    : | | <my_hash_first
T@6    : | | >_mymalloc
T@6    : | | | enter: Size: 22
T@6    : | | | exit: ptr: 0xb7e4f6c8
T@6    : | | <_mymalloc
T@6    : | | >my_hash_first
T@6    : | | <my_hash_first
T@6    : | <ip_to_hostname
T@6    : | info: Host: arcadia.planescape.cz  ip: 193.107.161.43
T@6    : | >vio_keepalive
T@6    : | | enter: sd: 75  set_keep_alive: 1
T@6    : | <vio_keepalive
T@6    : | >net_write_command
T@6    : | | enter: length: 61
T@6    : | <net_write_command
T@6    : | >net_flush
T@6    : | | >vio_is_blocking
T@6    : | | | exit: 0
T@6    : | | <vio_is_blocking
T@6    : | | >net_real_write
T@6    : | | | >query_cache_insert
T@6    : | | | <query_cache_insert
T@6    : | | | >vio_write
T@6    : | | | | enter: sd: 75  buf: 0xb7f033e0  size: 66
T@6    : | | | | exit: 66
T@6    : | | | <vio_write
T@6    : | | <net_real_write
T@6    : | <net_flush
T@6    : | >vio_is_blocking
T@6    : | | exit: 0
T@6    : | <vio_is_blocking
T@6    : | >vio_read
T@6    : | | enter: sd: 75  buf: 0xb7f033e0  size: 4
T@6    : | | vio_error: Got error 11 during read
T@6    : | | exit: -1
T@6    : | <vio_read
T@6    : | info: vio_read returned -1  errno: 11
T@6    : | >vio_blocking
T@6    : | | enter: set_blocking_mode: 1  old_mode: 0
T@6    : | | exit: 0
T@6    : | <vio_blocking
T@6    : | >vio_read
T@6    : | | enter: sd: 75  buf: 0xb7f033e0  size: 4
T@6    : | | exit: 4
T@6    : | <vio_read
T@6    : | packet_header: Memory: 0xb7f033e0  Bytes: (4)
T@6    : | >vio_read
T@6    : | | enter: sd: 75  buf: 0xb7f033e0  size: 32
T@6    : | | exit: 32
T@6    : | <vio_read
T@6    : | >vio_blocking
T@6    : | | enter: set_blocking_mode: 0  old_mode: 1
T@6    : | | exit: 0
T@6    : | <vio_blocking
T@6    : | >_mymalloc
T@6    : | | enter: Size: 16392
T@6    : | | exit: ptr: 0xb7e96e48
T@6    : | <_mymalloc
T@6    : | info: client_character_set: 8
T@6    : | info: client capabilities: 241285
T@6    : | info: IO layer change in progress...
T@6    : | >sslaccept
T@6    : | <sslaccept
T@6    : | >ssl_do
T@6    : | | enter: ptr: 0xb7e49a30, sd: 75  ctx: 0xb7e49aa8
T@6    : | | >vio_blocking
T@6    : | | | enter: set_blocking_mode: 1  old_mode: 0
T@6    : | | | exit: 0
T@6    : | | <vio_blocking
T@6    : | | info: ssl: 0xb7e6d0b0 timeout: 10
T@6    : | | error: SSL_connect/accept failure
T@6    : | | >report_errors
T@6    : | | | error: error: error:00000005:lib(0):func(0):DH lib
T@6    : | | | info: socket_errno: 0
T@6    : | | <report_errors
T@6    : | | >vio_blocking
T@6    : | | | enter: set_blocking_mode: 0  old_mode: 1
T@6    : | | | exit: 0
T@6    : | | <vio_blocking
T@6    : | <ssl_do
T@6    : | error: Failed to accept new SSL connection
T@6    : | >my_hash_first
T@6    : | | exit: found key at 0
T@6    : | <my_hash_first
T@6    : | >my_error
T@6    : | | my: nr: 1043  MyFlags: 0  errno: 0
T@6    : | <my_error
T@6    : | >my_message_sql
T@6    : | | error: error: 1043  message: 'Bad handshake'
T@6    : | | >query_cache_abort
T@6    : | | <query_cache_abort
T@6    : | | >push_warning
T@6    : | | | enter: code: 1043, msg: Bad handshake
T@6    : | | | >query_cache_abort
T@6    : | | | <query_cache_abort
T@6    : | | | >alloc_root
T@6    : | | | | enter: root: 0xb7ebdf54
T@6    : | | | | exit: ptr: 0xb7eec140
T@6    : | | | <alloc_root
T@6    : | | | >alloc_root
T@6    : | | | | enter: root: 0xb7ebdf54
T@6    : | | | | exit: ptr: 0xb7eec150
T@6    : | | | <alloc_root
T@6    : | | | >alloc_root
T@6    : | | | | enter: root: 0xb7ebdf54
T@6    : | | | | exit: ptr: 0xb7eec160
T@6    : | | | <alloc_root
T@6    : | | <push_warning
T@6    : | <my_message_sql
T@6    : | >net_send_error
T@6    : | | enter: sql_errno: 1043  err: Bad handshake
T@6    : | | >send_error_packet
T@6    : | | <send_error_packet
T@6    : | | >net_write_command
T@6    : | | | enter: length: 21
T@6    : | | <net_write_command
T@6    : | | >net_flush
T@6    : | | | >vio_is_blocking
T@6    : | | | | exit: 0
T@6    : | | | <vio_is_blocking
T@6    : | | | >net_real_write
T@6    : | | | | >query_cache_insert
T@6    : | | | | <query_cache_insert
T@6    : | | | | >vio_write
T@6    : | | | | | enter: sd: 75  buf: 0xb7f033e0  size: 26
T@6    : | | | | | exit: 26
T@6    : | | | | <vio_write
T@6    : | | | <net_real_write
T@6    : | | <net_flush
T@6    : | <net_send_error
T@6    : <login_connection


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group