[Box Backup] Decrypt Error

Johann Glaser Johann.Glaser at gmx.at
Sat Feb 24 17:46:48 GMT 2018


Hi!

After an update from BoxBackup 0.12~gitcf52058f-3 to
0.13~~git20180102.g6d7e9562-1 (Debian package names), I can't use
BoxBackup any more.

After I initiate a backup using "bbackupctl sync", the following
messages are in syslog:

Feb 24 16:03:17 localhost bbstored[7836]: NOTICE:  Login from Client ID 0x00000001 (name=): Read/Write from 127.0.0.1 port 34766
Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
Feb 24 16:03:17 localhost bbackupd[7837]: ERROR:   SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498
Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498
Feb 24 16:03:17 localhost bbackupd[7837]: ERROR:   Failed to configure location 'boot' path '/boot': EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: please check for previous errors
Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure location 'boot' path '/boot': EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: please check for previous errors
Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203)
Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203)
Feb 24 16:03:17 localhost bbackupd[7837]: ERROR:   Failed to configure location 'data' path '/data': AlreadyInTransform: please check for previous errors
Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure location 'data' path '/data': AlreadyInTransform: please check for previous errors
Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown: CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203)

When I execute bbackupquery, as soon as I enter the first command "ls",
I get the same error:

# bbackupquery 
NOTICE:  Box Backup Query Tool v0.13~~git20180102.g6d7e9562-1, (c) Ben Summers and contributors 2003-2014
query > ls
WARNING: Block 0x5560cd864070 freed, but not known. Error? Or allocated in startup static allocation?
ERROR:   SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498
FATAL:   EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt

and in syslog

Feb 24 18:36:36 localhost bbackupquery[20928]: Login complete.
Feb 24 18:36:36 localhost bbackupquery[20928]: Type "help" for a list of commands.
Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Block 0x5560cd864070 freed, but not known. Error? Or allocated in startup static allocation?
Feb 24 18:36:37 localhost bbackupquery[20928]: Receiving stream, size 432 bytes
Feb 24 18:36:37 localhost bbackupquery[20928]: Allocating filename encoding/decoding buffer with size 38
Feb 24 18:36:37 localhost bbackupquery[20928]: ERROR: SSL or crypto error: decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
Feb 24 18:36:37 localhost bbackupquery[20928]: Obtained 13 stack frames.
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 0: DumpStackBacktrace()+0x33
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 1: CipherContext::TransformBlock(void*, int, void const*, int)+0x1a45
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 2: BackupStoreFilenameClear::DecryptEncoded(CipherContext&) const+0x48
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 3: BackupStoreFilenameClear::MakeClearAvailable() const+0x247
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 4: BackupStoreFilenameClear::GetClearFilename[abi:cxx11]() const+0x9
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 5: SortByName(BackupStoreDirectory::Entry*, BackupStoreDirectory::Entry*)+0x7b
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 6: void std::__insertion_sort<__gnu_cxx::__normal_iterator<BackupStoreDirectory::Entry**, std::vector<BackupStoreDirectory::Entry*, std::allocator<BackupStoreDirectory::Entry*> > >, __gnu_cxx::__ops::_Iter_comp_iter<bool (*)(BackupStoreDirectory::Entry*, BackupStoreDirectory::Entry*)> >(__gnu_cxx::__normal_iterator<BackupStoreDirectory::Entry**, std::vector<BackupStoreDirectory::Entry*, std::allocator<BackupStoreDirectory::Entry*> > >, __gnu_cxx::__normal_iterator<BackupStoreDirectory::Entry**, std::vector<BackupStoreDirectory::Entry*, std::allocator<BackupStoreDirectory::Entry*> > >, __gnu_cxx::__ops::_Iter_comp_iter<bool (*)(BackupStoreDirectory::Entry*, BackupStoreDirectory::Entry*)>)+0x68
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 7: BackupQueries::List(long, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool const*, bool, std::ostream*)+0xcae
Feb 24 18:36:37 localhost bbstored[8645]: WARNING: Exception thrown: ConnectionException(TLSReadFailed) at lib/server/SocketStreamTLS.cpp(307)
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 8: BackupQueries::CommandList(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&, bool const*)+0x90
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 9: BackupQueries::DoCommand(BackupQueries::ParsedCommand&)+0x90f
Feb 24 18:36:37 localhost bbstored[8645]: NOTICE:  Connection statistics for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459 TOTAL=621
Feb 24 18:36:37 localhost bbstored[8645]: ERROR:   Error in child process, terminating connection: TLSReadFailed (7/34)
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 10: main+0x163d
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 11: __libc_start_main+0xea
Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 12: _start+0x2a
Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:498
Feb 24 18:36:37 localhost bbackupquery[20928]: FATAL: EVPFinalFailure: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt: Failed to finalise AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: WARNING: Exception thrown: ConnectionException(TLSReadFailed) at lib/server/SocketStreamTLS.cpp(307)
Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: NOTICE: Connection statistics for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459 TOTAL=621
Feb 24 18:36:37 localhost bbstored[20931]: ERROR: Error in child process, terminating connection: TLSReadFailed (7/34)

I also tried with the newest Version on Github, but got the same
results. Then I used GDB to find out more, but didn't succeed.

BTW: In lib/crypto/CipherBlowfish.h GetCipherName() returns "AES56"
(instead of Blowfish). Additionally, at least in OpenSSL terms, there
is a dash between the cipher and the key length.

Could you please help me get BoxBackup working again?

Thanks
  Hansi



More information about the Boxbackup mailing list