Unsolved
This post is more than 5 years old
10 Posts
0
5599
May 7th, 2012 09:00
avtar Error <6833>: **** Error 0x90317 on SSL recv
Hello,
I am receiving the following error message randomly on various Windows hosts in our enivonrment. It occurs on a daily basis but typically not on the same host for consecutive days. It results in a Failed with Exceptions status (not fatal). Anybody experienced this error before and been able to find a cause/resolution?
Client Log:
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6937>: **** Winsock Return Code 10060 receiving SSL data from server in ssl_sspi::recfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Error <6833>: **** Error 0x80090304 on SSL recv
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Warning <6830>: Sent partial encrypted buffer in ssl_sspi::sendfunc
avtar Info <5552>: Connecting to Server (server.domain.com)
avtar Info <5554>: - Connecting to one node in each datacenter
avtar Error <6833>: **** Error 0x90317 on SSL recv
avtar Info <5694>: - Failed initial handshake, trying again
avtar Info <5993>: - Connect: Connected to IPADDRESS:29000, Priv=0, SSL
avtar Info <5559>: - Trying connection IPADDRESS:29000
avtar Info <5560>: - Connected to node IPADDRESS:29000, Priv=0, SSL
avtar Info <5581>: - Logging in on connection 0 with Session Ticket
avtar Info <5582>: - Login successful
avtar Info <5018>: - Session ID: 9133593480037109
avtar Info <5550>: Successfully logged into Server (Compression enabled)


Sandeep_Sinha
307 Posts
0
May 7th, 2012 10:00
Hello,
Please check if these backups complete successfully with encryption set to none.
If the backups run fine without encryption, then this could be an issue with stunnel service which is used to present SSL interface to the Avamar server.
You may try restarting stunnel service using this command : stunctl restart
Thanks
RICKSHAW1
10 Posts
0
May 7th, 2012 13:00
Thanks for the response. You said the following,
"Please check if these backups complete successfully with encryption set to none."
The backups always finish and backup all data. The problem is that this SSL error 6833 shows up every now and then. The error doesnt result in the data not getting backed up. The backup actually completes but the status of the backup job shows as failed with exceptions (errors).
We are very pleased that the job is completing however, despite backing up all data, we do want to know why ithe job is throwing error 6833.
I will try tweaking the encryption settings and restarting the stunnel service as you suggested. Unfortunately, this is a very intermittent problem so only time will tell if this fixes the issue.
Thanks again for the response.
Bebo2k
544 Posts
0
May 7th, 2012 14:00
Hello,
Please following the steps to check stunnel works or not.
1) Stunnel is an intermediate layer between the client and the server.
Stunnel accepts connections on port 29000, and then relays the information to port 27000 via ASCD. Therefore, if stunnel is not up and running, all connections to port 29000 will fail.
1a) You can check if stunnel is running on the utility node by typing, as user root, on the utility node:
ps -elf | grep stunnel
Here is the expected response:
1 S admin 499 1 0 76 0 - 4676 - 2008 ? 00:00:00 /usr/sbin/stunnel /usr/local/avamar/etc/stunnel/stunnel.conf
1b) You can also confirm if stunnel is the issue by trying a backup with encrypt set to "proprietary" rather than to "ssl".
If a non-ssl backup works, but an ssl backup fails, then the issue could be with stunnel. It could also be because there is some issue with the SSL library on the client.
Thanks,
Ahmed Bahaa
RICKSHAW1
10 Posts
0
May 8th, 2012 07:00
Hello. Thanks for the response.
1a) Stunnel is running on the utility node. Here is the output I received
1 S admin 22562 1 0 76 0 - 4680 - 2011 ? 00:00:00 /usr/sbin/stunnel /usr/local/avamar/etc/stunnel/stunnel.conf
1b) Ill give this a shot. As I said, the problem is intermittent so it is difficult to say when we will experience the issue. I will try the encryption settings but I wont know if this "fixes" the problem for quite some time - until I go several weeks without an error.
Thanks for the response.
abreua
1 Message
0
November 13th, 2012 03:00
Ahmed,
Can you tell me how to set the encypt to "proprietary" rather than to "ssl"? I cant seem to find this option in the Avamar Admin GUI.
-Alan Abreu