[Box Backup] Decrypt Error

Chris Wilson chris+google at qwirx.com
Sun Feb 25 08:20:07 GMT 2018


Hi Hansi,

Oops! I'm really sorry that this happened to you. My top priority is to get
things working again for you, and then to figure out how this could have
happened and made it into a release.

I think the upgrade to OpenSSL 1.1 must be to blame. Please could you go
into your Git checkout and run these commands:

git fetch
git checkout revert_openssl_1_1

And then compile and build Box Backup and see if that version works?

Thanks, Chris.

On 24 February 2018 at 17:46, Johann Glaser <Johann.Glaser at gmx.at> wrote:

> Hi!
>
> After an update from BoxBackup 0.12~gitcf52058f-3 to
> 0.13~~git20180102.g6d7e9562-1 (Debian package names), I can't use
> BoxBackup any more.
>
> After I initiate a backup using "bbackupctl sync", the following
> messages are in syslog:
>
> Feb 24 16:03:17 localhost bbstored[7836]: NOTICE:  Login from Client ID
> 0x00000001 (name=): Read/Write from 127.0.0.1 port 34766
> Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: SSL or crypto error:
> decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
> decrypt
> Feb 24 16:03:17 localhost bbackupd[7837]: ERROR:   SSL or crypto error:
> decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
> decrypt
> Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown:
> CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC:
> error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt)
> at lib/crypto/CipherContext.cpp:498
> Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown:
> CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC:
> error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt)
> at lib/crypto/CipherContext.cpp:498
> Feb 24 16:03:17 localhost bbackupd[7837]: ERROR:   Failed to configure
> location 'boot' path '/boot': EVPFinalFailure: Failed to finalise
> AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
> decrypt: please check for previous errors
> Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure
> location 'boot' path '/boot': EVPFinalFailure: Failed to finalise
> AES56-CBC: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
> decrypt: please check for previous errors
> Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown:
> CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203)
> Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown:
> CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203)
> Feb 24 16:03:17 localhost bbackupd[7837]: ERROR:   Failed to configure
> location 'data' path '/data': AlreadyInTransform: please check for previous
> errors
> Feb 24 16:03:17 localhost bbackupd[7837]: ERROR: Failed to configure
> location 'data' path '/data': AlreadyInTransform: please check for previous
> errors
> Feb 24 16:03:17 localhost bbackupd[7837]: WARNING: Exception thrown:
> CipherException(AlreadyInTransform) at lib/crypto/CipherContext.cpp(203)
>
> When I execute bbackupquery, as soon as I enter the first command "ls",
> I get the same error:
>
> # bbackupquery
> NOTICE:  Box Backup Query Tool v0.13~~git20180102.g6d7e9562-1, (c) Ben
> Summers and contributors 2003-2014
> query > ls
> WARNING: Block 0x5560cd864070 freed, but not known. Error? Or allocated in
> startup static allocation?
> ERROR:   SSL or crypto error: decrypt: error:06065064:digital envelope
> routines:EVP_DecryptFinal_ex:bad decrypt
> WARNING: Exception thrown: CipherException(EVPFinalFailure) (Failed to
> finalise AES56-CBC: error:06065064:digital envelope
> routines:EVP_DecryptFinal_ex:bad decrypt) at lib/crypto/CipherContext.cpp:
> 498
> FATAL:   EVPFinalFailure: Failed to finalise AES56-CBC:
> error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:
> Failed to finalise AES56-CBC: error:06065064:digital envelope
> routines:EVP_DecryptFinal_ex:bad decrypt
>
> and in syslog
>
> Feb 24 18:36:36 localhost bbackupquery[20928]: Login complete.
> Feb 24 18:36:36 localhost bbackupquery[20928]: Type "help" for a list of
> commands.
> Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Block
> 0x5560cd864070 freed, but not known. Error? Or allocated in startup static
> allocation?
> Feb 24 18:36:37 localhost bbackupquery[20928]: Receiving stream, size 432
> bytes
> Feb 24 18:36:37 localhost bbackupquery[20928]: Allocating filename
> encoding/decoding buffer with size 38
> Feb 24 18:36:37 localhost bbackupquery[20928]: ERROR: SSL or crypto error:
> decrypt: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad
> decrypt
> Feb 24 18:36:37 localhost bbackupquery[20928]: Obtained 13 stack frames.
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 0:
> DumpStackBacktrace()+0x33
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 1:
> CipherContext::TransformBlock(void*, int, void const*, int)+0x1a45
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 2:
> BackupStoreFilenameClear::DecryptEncoded(CipherContext&) const+0x48
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 3:
> BackupStoreFilenameClear::MakeClearAvailable() const+0x247
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 4:
> BackupStoreFilenameClear::GetClearFilename[abi:cxx11]() const+0x9
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 5: SortByName(BackupStoreDirectory::Entry*,
> BackupStoreDirectory::Entry*)+0x7b
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 6: void
> std::__insertion_sort<__gnu_cxx::__normal_iterator<BackupStoreDirectory::Entry**,
> std::vector<BackupStoreDirectory::Entry*, std::allocator<BackupStoreDirectory::Entry*>
> > >, __gnu_cxx::__ops::_Iter_comp_iter<bool (*)(BackupStoreDirectory::Entry*,
> BackupStoreDirectory::Entry*)> >(__gnu_cxx::__normal_
> iterator<BackupStoreDirectory::Entry**, std::vector<BackupStoreDirectory::Entry*,
> std::allocator<BackupStoreDirectory::Entry*> > >,
> __gnu_cxx::__normal_iterator<BackupStoreDirectory::Entry**, std::vector<BackupStoreDirectory::Entry*,
> std::allocator<BackupStoreDirectory::Entry*> > >,
> __gnu_cxx::__ops::_Iter_comp_iter<bool (*)(BackupStoreDirectory::Entry*,
> BackupStoreDirectory::Entry*)>)+0x68
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 7:
> BackupQueries::List(long, std::__cxx11::basic_string<char,
> std::char_traits<char>, std::allocator<char> > const&, bool const*, bool,
> std::ostream*)+0xcae
> Feb 24 18:36:37 localhost bbstored[8645]: WARNING: Exception thrown:
> ConnectionException(TLSReadFailed) at lib/server/SocketStreamTLS.cpp(307)
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 8:
> BackupQueries::CommandList(std::vector<std::__cxx11::basic_string<char,
> std::char_traits<char>, std::allocator<char> >,
> std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>,
> std::allocator<char> > > > const&, bool const*)+0x90
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 9:
> BackupQueries::DoCommand(BackupQueries::ParsedCommand&)+0x90f
> Feb 24 18:36:37 localhost bbstored[8645]: NOTICE:  Connection statistics
> for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459 TOTAL=621
> Feb 24 18:36:37 localhost bbstored[8645]: ERROR:   Error in child process,
> terminating connection: TLSReadFailed (7/34)
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 10: main+0x163d
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 11:
> __libc_start_main+0xea
> Feb 24 18:36:37 localhost bbackupquery[20928]: Stack frame 12: _start+0x2a
> Feb 24 18:36:37 localhost bbackupquery[20928]: WARNING: Exception thrown:
> CipherException(EVPFinalFailure) (Failed to finalise AES56-CBC:
> error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt)
> at lib/crypto/CipherContext.cpp:498
> Feb 24 18:36:37 localhost bbackupquery[20928]: FATAL: EVPFinalFailure:
> Failed to finalise AES56-CBC: error:06065064:digital envelope
> routines:EVP_DecryptFinal_ex:bad decrypt: Failed to finalise AES56-CBC:
> error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
> Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: WARNING:
> Exception thrown: ConnectionException(TLSReadFailed) at
> lib/server/SocketStreamTLS.cpp(307)
> Feb 24 18:36:37 localhost bbstored client=0x00000001[20931]: NOTICE:
> Connection statistics for 0x00000001 (name=): IN=81 OUT=540 NET_IN=-459
> TOTAL=621
> Feb 24 18:36:37 localhost bbstored[20931]: ERROR: Error in child process,
> terminating connection: TLSReadFailed (7/34)
>
> I also tried with the newest Version on Github, but got the same
> results. Then I used GDB to find out more, but didn't succeed.
>
> BTW: In lib/crypto/CipherBlowfish.h GetCipherName() returns "AES56"
> (instead of Blowfish). Additionally, at least in OpenSSL terms, there
> is a dash between the cipher and the key length.
>
> Could you please help me get BoxBackup working again?
>
> Thanks
>   Hansi
>
> _______________________________________________
> Boxbackup mailing list
> Boxbackup at boxbackup.org
> http://lists.boxbackup.org/mailman/listinfo/boxbackup
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.boxbackup.org/pipermail/boxbackup/attachments/20180225/1421f55e/attachment.html>


More information about the Boxbackup mailing list