From Johann.Glaser at gmx.at Sat Feb 24 17:46:48 2018 From: Johann.Glaser at gmx.at (Johann Glaser) Date: Sat, 24 Feb 2018 18:46:48 +0100 Subject: [Box Backup] Decrypt Error Message-ID: <1519494408.2877.63.camel@gmx.at> Hi! After an update from BoxBackup 0.12~gitcf52058f-3 to 0.13~~git20180102.g6d7e9562-1 (Debian package names), I can't use BoxBackup any more. After I initiate a backup using "bbackupctl sync", the following messages are in syslog: Feb 24 16:03:17 localhost bbstored[7836]: NOTICE: Login from Client ID 0x00000001 (name=): Read/Write from 127.0.0.1 port 34766 Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498 Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498 Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure location 'boot' path '/boot': EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: please check for previous errors Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure location 'boot' path '/boot': EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: please check for previous errors Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203) Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203) Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure location 'data' path '/data': AlreadyInTransform: please check for previous errors Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure location 'data' path '/data': AlreadyInTransform: please check for previous errors Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203) When I execute bbackupquery, as soon as I enter the first command "ls", I get the same error: # bbackupquery NOTICE: Box Backup Query Tool v0.13~~git20180102.g6d7e9562-1, (c) Ben Summers and contributors 2003-2014 query > ls WARNING: Block 0x5560cd864070 freed, but not known. Error? Or allocated in startup static allocation? ERROR: SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498 FATAL: EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt and in syslog Feb 24 18:36:36 localhost bbackupquery[20928]: Login complete. Feb 24 18:36:36 localhost bbackupquery[20928]: Type "help" for a list of commands. Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Block 0x5560cd864070 freed, but not known. Error? Or allocated in startup static allocation? Feb 24 18:36:37 localhost bbackupquery[20928]: Receiving stream, size 432 bytes Feb 24 18:36:37 localhost bbackupquery[20928]: Allocating filename encoding/decoding buffer with size 38 Feb 24 18:36:37 localhost bbackupquery[20928]: ERROR: SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Feb 24 18:36:37 localhost bbackupquery[20928]: Obtained 13 stack frames. Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 0: DumpStackBacktrace()+0x33 Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 1: CipherContext::TransformBlock(void*, int, void const*, int)+0x1a45 Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 2: BackupStoreFilenameClear::DecryptEncoded(CipherContext&) const+0x48 Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 3: BackupStoreFilenameClear::MakeClearAvailable() const+0x247 Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 4: BackupStoreFilenameClear::GetClearFilename[abi:cxx11]() const+0x9 Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 5: SortByName(BackupStoreDirectory::Entry*, BackupStoreDirectory::Entry*)+0x7b Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 6: void std::__insertion_sort<__gnu_cxx::__normal_iterator > >, __gnu_cxx::__ops::_Iter_comp_iter >(__gnu_cxx::__normal_iterator > >, __gnu_cxx::__normal_iterator > >, __gnu_cxx::__ops::_Iter_comp_iter)+0x68 Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 7: BackupQueries::List(long, std::__cxx11::basic_string, std::allocator > const&, bool const*, bool, std::ostream*)+0xcae Feb 24 18:36:37 localhost bbstored[8645]: WARNING: Exception thrown: ConnectionException(TLSReadFailed) at lib/server/SocketStreamTLS.cpp(307) Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 8: BackupQueries::CommandList(std::vector, std::allocator >, std::allocator, std::allocator > > > const&, bool const*)+0x90 Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 9: BackupQueries::DoCommand(BackupQueries::ParsedCommand&)+0x90f Feb 24 18:36:37 localhost bbstored[8645]: NOTICE: Connection statistics for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459 TOTAL=621 Feb 24 18:36:37 localhost bbstored[8645]: ERROR: Error in child process, terminating connection: TLSReadFailed (7/34) Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 10: main+0x163d Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 11: __libc_start_main+0xea Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 12: _start+0x2a Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498 Feb 24 18:36:37 localhost bbackupquery[20928]: FATAL: EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: WARNING: Exception thrown: ConnectionException(TLSReadFailed) at lib/server/SocketStreamTLS.cpp(307) Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: NOTICE: Connection statistics for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459 TOTAL=621 Feb 24 18:36:37 localhost bbstored[20931]: ERROR: Error in child process, terminating connection: TLSReadFailed (7/34) I also tried with the newest Version on Github, but got the same results. Then I used GDB to find out more, but didn't succeed. BTW: In lib/crypto/CipherBlowfish.h GetCipherName() returns "AES56" (instead of Blowfish). Additionally, at least in OpenSSL terms, there is a dash between the cipher and the key length. Could you please help me get BoxBackup working again? Thanks Hansi From chris+google at qwirx.com Sun Feb 25 08:20:07 2018 From: chris+google at qwirx.com (Chris Wilson) Date: Sun, 25 Feb 2018 08:20:07 +0000 Subject: [Box Backup] Decrypt Error In-Reply-To: <1519494408.2877.63.camel@gmx.at> References: <1519494408.2877.63.camel@gmx.at> Message-ID: Hi Hansi, Oops! I'm really sorry that this happened to you. My top priority is to get things working again for you, and then to figure out how this could have happened and made it into a release. I think the upgrade to OpenSSL 1.1 must be to blame. Please could you go into your Git checkout and run these commands: git fetch git checkout revert_openssl_1_1 And then compile and build Box Backup and see if that version works? Thanks, Chris. On 24 February 2018 at 17:46, Johann Glaser wrote: > Hi! > > After an update from BoxBackup 0.12~gitcf52058f-3 to > 0.13~~git20180102.g6d7e9562-1 (Debian package names), I can't use > BoxBackup any more. > > After I initiate a backup using "bbackupctl sync", the following > messages are in syslog: > > Feb 24 16:03:17 localhost bbstored[7836]: NOTICE: Login from Client ID > 0x00000001 (name=): Read/Write from 127.0.0.1 port 34766 > Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: SSL or crypto error: > decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad > decrypt > Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: SSL or crypto error: > decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad > decrypt > Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: > CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: > error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) > at lib/crypto/CipherContext.cpp:498 > Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: > CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: > error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) > at lib/crypto/CipherContext.cpp:498 > Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure > location 'boot' path '/boot': EVPFinalFailure: Failed to finalise > AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad > decrypt: please check for previous errors > Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure > location 'boot' path '/boot': EVPFinalFailure: Failed to finalise > AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad > decrypt: please check for previous errors > Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: > CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203) > Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: > CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203) > Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure > location 'data' path '/data': AlreadyInTransform: please check for previous > errors > Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure > location 'data' path '/data': AlreadyInTransform: please check for previous > errors > Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: > CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203) > > When I execute bbackupquery, as soon as I enter the first command "ls", > I get the same error: > > # bbackupquery > NOTICE: Box Backup Query Tool v0.13~~git20180102.g6d7e9562-1, (c) Ben > Summers and contributors 2003-2014 > query > ls > WARNING: Block 0x5560cd864070 freed, but not known. Error? Or allocated in > startup static allocation? > ERROR: SSL or crypto error: decrypt: error:06065064:digital envelope > routines:EVP_DecryptFinal_ex:bad decrypt > WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to > finalise AES56-CBC: error:06065064:digital envelope > routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp: > 498 > FATAL: EVPFinalFailure: Failed to finalise AES56-CBC: > error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: > Failed to finalise AES56-CBC: error:06065064:digital envelope > routines:EVP_DecryptFinal_ex:bad decrypt > > and in syslog > > Feb 24 18:36:36 localhost bbackupquery[20928]: Login complete. > Feb 24 18:36:36 localhost bbackupquery[20928]: Type "help" for a list of > commands. > Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Block > 0x5560cd864070 freed, but not known. Error? Or allocated in startup static > allocation? > Feb 24 18:36:37 localhost bbackupquery[20928]: Receiving stream, size 432 > bytes > Feb 24 18:36:37 localhost bbackupquery[20928]: Allocating filename > encoding/decoding buffer with size 38 > Feb 24 18:36:37 localhost bbackupquery[20928]: ERROR: SSL or crypto error: > decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad > decrypt > Feb 24 18:36:37 localhost bbackupquery[20928]: Obtained 13 stack frames. > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 0: > DumpStackBacktrace()+0x33 > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 1: > CipherContext::TransformBlock(void*, int, void const*, int)+0x1a45 > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 2: > BackupStoreFilenameClear::DecryptEncoded(CipherContext&) const+0x48 > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 3: > BackupStoreFilenameClear::MakeClearAvailable() const+0x247 > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 4: > BackupStoreFilenameClear::GetClearFilename[abi:cxx11]() const+0x9 > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 5: SortByName(BackupStoreDirectory::Entry*, > BackupStoreDirectory::Entry*)+0x7b > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 6: void > std::__insertion_sort<__gnu_cxx::__normal_iterator std::vector > > >, __gnu_cxx::__ops::_Iter_comp_iter BackupStoreDirectory::Entry*)> >(__gnu_cxx::__normal_ > iterator std::allocator > >, > __gnu_cxx::__normal_iterator std::allocator > >, > __gnu_cxx::__ops::_Iter_comp_iter BackupStoreDirectory::Entry*)>)+0x68 > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 7: > BackupQueries::List(long, std::__cxx11::basic_string std::char_traits, std::allocator > const&, bool const*, bool, > std::ostream*)+0xcae > Feb 24 18:36:37 localhost bbstored[8645]: WARNING: Exception thrown: > ConnectionException(TLSReadFailed) at lib/server/SocketStreamTLS.cpp(307) > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 8: > BackupQueries::CommandList(std::vector std::char_traits, std::allocator >, > std::allocator, > std::allocator > > > const&, bool const*)+0x90 > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 9: > BackupQueries::DoCommand(BackupQueries::ParsedCommand&)+0x90f > Feb 24 18:36:37 localhost bbstored[8645]: NOTICE: Connection statistics > for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459 TOTAL=621 > Feb 24 18:36:37 localhost bbstored[8645]: ERROR: Error in child process, > terminating connection: TLSReadFailed (7/34) > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 10: main+0x163d > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 11: > __libc_start_main+0xea > Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 12: _start+0x2a > Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Exception thrown: > CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: > error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) > at lib/crypto/CipherContext.cpp:498 > Feb 24 18:36:37 localhost bbackupquery[20928]: FATAL: EVPFinalFailure: > Failed to finalise AES56-CBC: error:06065064:digital envelope > routines:EVP_DecryptFinal_ex:bad decrypt: Failed to finalise AES56-CBC: > error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt > Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: WARNING: > Exception thrown: ConnectionException(TLSReadFailed) at > lib/server/SocketStreamTLS.cpp(307) > Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: NOTICE: > Connection statistics for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459 > TOTAL=621 > Feb 24 18:36:37 localhost bbstored[20931]: ERROR: Error in child process, > terminating connection: TLSReadFailed (7/34) > > I also tried with the newest Version on Github, but got the same > results. Then I used GDB to find out more, but didn't succeed. > > BTW: In lib/crypto/CipherBlowfish.h GetCipherName() returns "AES56" > (instead of Blowfish). Additionally, at least in OpenSSL terms, there > is a dash between the cipher and the key length. > > Could you please help me get BoxBackup working again? > > Thanks > Hansi > > _______________________________________________ > Boxbackup mailing list > Boxbackup at boxbackup.org > http://lists.boxbackup.org/mailman/listinfo/boxbackup > -------------- next part -------------- An HTML attachment was scrubbed... URL: