Unsolved

This post is more than 5 years old

10 Posts

5599

May 7th, 2012 09:00

avtar Error <6833>: **** Error 0x90317 on SSL recv

Hello,

I am receiving the following error message randomly on various Windows hosts in our enivonrment.   It occurs on a daily basis but typically not on the same host for consecutive days.  It results in a Failed with Exceptions status (not fatal).  Anybody experienced this error before and been able to find a cause/resolution?

Client Log:

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6937>: **** Winsock Return Code 10060 receiving SSL data from server in ssl_sspi::recfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Error <6833>: **** Error 0x80090304 on SSL recv

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc

avtar Info <5552>: Connecting to Server (server.domain.com)

avtar Info <5554>: - Connecting to one node in each datacenter

avtar Error <6833>: **** Error 0x90317 on SSL recv

avtar Info <5694>: - Failed initial handshake, trying again

avtar Info <5993>: - Connect: Connected to IPADDRESS:29000, Priv=0, SSL

avtar Info <5559>: - Trying connection IPADDRESS:29000

avtar Info <5560>: - Connected to node IPADDRESS:29000, Priv=0, SSL

avtar Info <5581>: - Logging in on connection 0 with Session Ticket

avtar Info <5582>: - Login successful

avtar Info <5018>: - Session ID: 9133593480037109

avtar Info <5550>: Successfully logged into Server (Compression enabled)

307 Posts

May 7th, 2012 10:00

Hello,

Please check if these backups complete successfully with encryption set to none.

If the backups run fine without encryption, then this could be an issue with stunnel service which is used to present SSL interface to the Avamar server.

You may try restarting stunnel service using this command : stunctl restart

Thanks

10 Posts

May 7th, 2012 13:00

Thanks for the response.  You said the following,

"Please check if these backups complete successfully with encryption set to none."

The backups always finish and backup all data.   The problem is that this SSL error 6833 shows up every now and then.   The error doesnt result in the data not getting backed up.   The backup actually completes but the status of the backup job shows as failed with exceptions (errors). 

We are very pleased that the job is completing however, despite backing up all data, we do want to know why ithe job is throwing error 6833.

I will try tweaking the encryption settings and restarting the stunnel service as you suggested.   Unfortunately, this is a very intermittent problem so only time will tell if this fixes the issue.

Thanks again for the response.

544 Posts

May 7th, 2012 14:00

Hello,

Please following the steps to check stunnel works or not.

1) Stunnel is an intermediate layer between the client and the server.

Stunnel accepts connections on port 29000, and then relays the information to port 27000 via ASCD. Therefore, if stunnel is not up and running, all connections to port 29000 will fail.

1a) You can check if stunnel is running on the utility node by typing, as user root, on the utility node:

ps -elf | grep stunnel

Here is the expected response:

1 S admin 499 1 0 76 0 - 4676 - 2008 ? 00:00:00 /usr/sbin/stunnel /usr/local/avamar/etc/stunnel/stunnel.conf

1b) You can also confirm if stunnel is the issue by trying a backup with encrypt set to "proprietary" rather than to "ssl".
If a non-ssl backup works, but an ssl backup fails, then the issue could be with stunnel. It could also be because there is some issue with the SSL library on the client.

Thanks,

Ahmed Bahaa

10 Posts

May 8th, 2012 07:00

Hello.  Thanks for the response.

1a)  Stunnel is running on the utility node.  Here is the output I received

1 S admin    22562     1  0  76   0 -  4680 -       2011 ?        00:00:00 /usr/sbin/stunnel /usr/local/avamar/etc/stunnel/stunnel.conf

1b)  Ill give this a shot.  As I said, the problem is intermittent so it is difficult to say when we will experience the issue.   I will try the encryption settings but I wont know if this "fixes" the problem for quite some time - until I go several weeks without an error.

Thanks for the response.

1 Message

November 13th, 2012 03:00

Ahmed,

Can you tell me how to set the encypt to "proprietary" rather than to "ssl"? I cant seem to find this option in the Avamar Admin GUI.

-Alan Abreu

No Events found!

Top