-
rbrunner
Just wondering: Is everything working as intended if the daemon (started without any special options) defaults to not accepting SSL connections from wallets
-
rbrunner
and the CLI wallet in turn (again without any special options) defaults to *using* SSL, which results in no connection to the daemon?
-
rbrunner
Just tried today with everything compiled from current master
-
rbrunner
I seem to have that state currently on my Linux system
-
blackpenguin
rbrunner: I thought default is accept SSL if client supports it (and create an ssl-cert on the fly)
-
rbrunner
blackpenguin: I do wonder whether something is special with my system, that's why I hope for somebody in the know to tell how it definitely *should* be
-
rbrunner
To check / reproduce, create a new wallet.
-
moneromooo
Bug ? I have no scrollback here. What is it about ?
-
rbrunner
I start the daemon without any special options, then the CLI wallet without special options, and the CLI wallet does not get a connection to the daemon
-
moneromooo
Same host/VM (sorry) ?
-
rbrunner
Reason: My daemon defaults to not using SSL, my CLI wallet wants to use SSL, the two do not find each other for creating a new wallet
-
rbrunner
Yes, all local
-
moneromooo
Does it work if you specifically set ssl to autodetect (which ought to be the default) ?
-
rbrunner
It works as soon as I tell the CLI wallet to give up SSL
-
rbrunner
--daemon-ssl disabled
-
rbrunner
Yes, it shows "autodetect" as default in the help text: --daemon-ssl arg (=autodetect)
-
rbrunner
No, with that it does not work on my particular Linux system
-
rbrunner
If I try to create a new wallet, or restore one with seed
-
moneromooo
Does it work with SSL set to enabled on both ?
-
rbrunner
Did not yet try that combination
-
moneromooo
I don't recall how the whitelisting works now, but also try looking for a "allow any cert" flag.
-
rbrunner
Will try now
-
rbrunner
Nope, daemon with SSL enabled and wallet started like that does not work: ./monero-wallet-cli --testnet --daemon-ssl enabled --daemon-ssl-allow-any-cert
-
rbrunner
What I wonder the most with all that: That the default (as it seems "autodetect" on both sides, right?) does not work for me
-
rbrunner
Somehow I can't believe that it should be that broken, but on the other hand no idea what should be special with my system, or what I could do wrong ...
-
rbrunner
Maybe, because I self-compile, some library with a wrong version comes in that then has this strange result?
-
moneromooo
Try allowing any cert on the daemon too.
-
moneromooo
Could be, if they don't have matching ciphers. But seems unlikely unless you built on different machines.
-
moneromooo
There's openssl s_client which can be used to probe a server (and possibly a s_server, let's check)
-
moneromooo
There is. Then you can try s_client vs monerod, and monero-wallet-cli vs s_server, and see what it moans about.
-
moneromooo
I do not remember how to use, but there are man pages for s_client(1) and s_server(1).
-
moneromooo
IIRC monero allows only a very short number of suites.
-
rbrunner
Thanks for the support moneromooo, but I think I put it away, as I tried now with official release software, and there it works.
-
selsta
rbrunner: something that works in release and not master seems like a bug
-
rbrunner
No, I think the problem is merely local on my machine somehow: My *self-compiled* binaries behave strangely, for whatever reason
-
rbrunner
I noticed that I had the Linux headers as a "held back" package for a long time and finally updated properly, but the problem persists, so ...
-
selsta
when did you start noticing this issue?
-
rbrunner
A few weeks ago for the first time, then I forgot, and faced it again today.
-
rbrunner
What's the most strange about this: Some wallets that I created earlier work. Is it stored in the wallet files whether to use SSL or not with the daemon?
-
moneromooo
No.
-
rbrunner
Then it's even stranger :)
-
moneromooo
Do the logs tell you what it's doing on connection (on both client and server) ?
-
rbrunner
Never checked so far. Do people think something interesting could possibly come out of a further inspection, beyond merely "rbrunner7's system is flaky, so there"? If yes, I can continue to investigate.
-
moneromooo
We do not know whether it is interesting without debugging. It depends how far you want to go.
-
one-horse-wagon[
rbrunner: I run Debian linux on my computers. If you do also and if you like, tell me how you "self-compiled" the binaries and I'll try the same on my computers. That way it will verify where the bug is at.
-
selsta
.merge+ 8593 8594 8590 8580 8578 8571 8570 8569 8564 8543 8529 8527 8525 8517 8516 8355 8319
-
xmr-pr
Added
-
rbrunner
one-horse-wagon: I am also on Debian. I just check out the Monero source in Git and then "make" or "make debug", that's it. Absolutely nothing fancy.
-
rbrunner
Dependencies installed a way ago already, never looked too closely whether they get properly updated automatically however.
-
one-horse-wagon[
rbrunner: Not to insult you, please, but how long has it been since you did apt-get update and apt-get upgrade?
-
rbrunner
One hour?
-
rbrunner
Installed aptitude today to finally get rid of "held back" packages in a safe way
-
one-horse-wagon[
rbrunner: LOL. Sorry.
-
rbrunner
In the hope that this brings the solution.
-
moneromooo
I could matter if you built with some libs and are running with others.
-
rbrunner
No problem, do ask, I have done absolutely dumb things in the past.
-
moneromooo
Ideally sonames would find what;s needed but you never know.
-
moneromooo
Like updates in /usr/share.
-
moneromooo
Anyway, s_client/s_server and monero logs are the next things to try.
-
rbrunner
Ok, maybe a start an attempt this Sunday. It's kind of interesting, the problem.
-
rbrunner
But as I already mentioned, probably not urgent, because our release software does *not* exhibit that problem on my system.
-
one-horse-wagon[
rbrunner: I'll try building the binaries this afternoon and let you know here, what happened.
-
rbrunner
Splendid, a cliffhanger :)
-
binaryFate
Binaries for v0.18.1.2 are now available at getmonero.org, great job everyone