search for: evp_encryptupdate

One of my hosts just rebooted for the first time in ages, and now it won't connect to any other nodes. The log just contains continual "error while decrypting metadata" errors. tincd[8324]: Error while decrypting: error:060A7094:digital envelope routines:EVP_EncryptUpdate:invalid operation tincd[8324]: Error while decrypting metadata from fairfield_gw (yy.yy.yy.yy port 655) tincd[8324]: Error while decrypting: error:060A7094:digital envelope routines:EVP_EncryptUpdate:invalid operation tincd[8324]: Error while decrypting metadata from rs2 (abc::def port 655) tincd...

When I install Tinc 1.1pre17 on Debian (from the 1.1~pre17-1.1 package in experimental), I hit the following error: Error while decrypting: error:060A7094:digital envelope routines:EVP_EncryptUpdate:invalid operation I tried compiling Tinc myself from the Debian source, and still hit the same issue. 1.0 works fine, but I'd like to upgrade to 1.1 Any ideas on how to fix it? I'm using OpenSSL 1.1.1b-2 -------------- next part -------------- An HTML attachment was scrubbed... URL: <...

Thanks Peter. I saw that bug report and actually posted a comment on it. I think I may have some software that depends on OpenSSL 1.1.1b so I can't downgrade it. On Mon, May 20, 2019 at 7:25 AM Peter Whisker <peter at whisker.org.uk> wrote: > Hi Daniel > > This is all I can see about this out there - it seems to be a problem > brought about by OpenSSL 1.1.1b and the

...wing works for bulk ciphers (the process for RSA is similar): > > ENGINE *e; > ENGINE_load_builtin_engines(); > e = ENGINE_by_id("pkcs11"); > ENGINE_set_default_ciphers(e); > EVP_CIPHER_CTX_init (&ctx); > EVP_EncryptInit (&ctx, EVP_des_cbc (), key, iv); > EVP_EncryptUpdate (.....); Since I'm not familiar with SSL programming, I wonder if it's possible to modify the dovecot 1.2.x source code. Maybe someone has already tried this or can give me hint. Regards. Martin -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s...

...t rammhold.de> With OpenSSL versions 1.0.2r & 1.1.1b there were changes in regards to how OpenSSL treats misuse of Encrypt/Decrypt EVP methods in the opposite case. E.g. using the encrypt methods in a decrypt context. OpenSSL now returns an error in these situations. [1] Since tinc used the EVP_EncryptUpdate function in the cipher_decrypt function the new sanity check was triggered causing tinc to be unusable with said OpenSSL versions. [1] https://github.com/openssl/openssl/pull/7852 --- src/openssl/cipher.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/openssl/cipher.c b/s...

...ne of my hosts just rebooted for the first time in ages, and now it > won't connect to any other nodes. > > The log just contains continual "error while decrypting metadata" errors. > > tincd[8324]: Error while decrypting: error:060A7094:digital envelope > routines:EVP_EncryptUpdate:invalid operation > tincd[8324]: Error while decrypting metadata from fairfield_gw > (yy.yy.yy.yy port 655) This post https://forums.gentoo.org/viewtopic-p-8318236.html?sid=99120772f26c6abcafff9c6c375d6d5e suggests upgrading to 1.1pre17 helps. But I did that and nothing changed. It sugg...

...and also got 10MB/s with 100% CPU on one thread the other three available threads are idle. With inc_1.1~pre17-1.1_amd64.deb and libssl1.1:amd64 1.1.1d-0+deb10u2 I get the following error: Apr 04 19:03:19 officelink01 tincd[522]: Error while decrypting: error:060A7094:digital envelope routines:EVP_EncryptUpdate:invalid operation installation steps: wget http://ftp.nl.debian.org/debian/pool/main/t/tinc/tinc_1.1~pre17-1.1_amd64.deb dpkg -i tinc_1.1~pre17-1.1_amd64.deb apt-get -f install Any speed improvement ideas? Kind regards, Jelle On 2020-04-04 20:02, Jelle de Jong wrote: > Hello everybody, &gt...

Hello everybody, First a big thanks for tinc-vpn I am still using it next to wireguard and openvpn. I am having a setup where the tinc debian appliance is at 100% cpu load doing about 7.5MB/s. Compression = 9 PMTU = 1400 PMTUDiscovery = yes Cipher = aes-128-cbc How can I pick a cipher that is the fasted for my CPU and don't create a CPU bottleneck at 100%. Kind regards, Jelle de Jong

...} diff -ubr tinc-1.0.8/src/meta.c tinc-1.0.8.my/src/meta.c --- tinc-1.0.8/src/meta.c Tue Nov 14 14:28:11 2006 +++ tinc-1.0.8.my/src/meta.c Thu Sep 25 11:19:53 2008 @@ -59,7 +59,7 @@ } /* Add our data to buffer */ - if(c->status.encryptout) { + if(c->status.st.encryptout) { result = EVP_EncryptUpdate(c->outctx, (unsigned char *)c->outbuf + c->outbufstart + c->outbuflen, &outlen, (unsigned char *)buffer, length); if(!result || outlen < length) { @@ -126,7 +126,7 @@ for(node = connection_tree->head; node; node = node->next) { c = node->data; - if(c != f...