[zorp-hu] 3.9 ssl keybridge nem indul

KOVACS Krisztian hidden at balabit.hu
2011. Ápr. 13., Sze, 16:21:02 CEST


Sziasztok,

On 04/13/2011 04:06 PM, Kosa Attila wrote:
> On Wed, Apr 13, 2011 at 03:51:30PM +0200, KOVACS Krisztian wrote:
>>> class KeybrideStrongHttpsProxy(StrongHttpsProxy):
>>>         def config(self):
>>>                 StrongPsslProxy.config(self)
>>
>> A fentit javitsd ki 'StrongHttpsProxy.config(self)'-re.
>>
>> Vegulis itt arrol van szo, hogy a szulo osztaly config metodusat hivja
>> meg, szoval a szulo osztaly nevet kell odairni a .config(self) ele.
> 
> Az elozo levelemben kuldtem egy teljes konfigot. Most abba
> beleirtam a fenti javaslatodat, de tovabbra sem mukodik. A logban
> ez van:
> 
> Apr 13 16:01:59 squeeze-zorp39gpl zorp/zorp_https[14032]: core.debug(4): (dsp/dispatch:0): Adding dynamic interface address; addr='AF_INET(192.168.2.254:60443)', dispa
> tch='IFACE(proto=1,iface=eth1,ip=192.168.2.254,port=60443,family=2)'
> Apr 13 16:02:35 squeeze-zorp39gpl zorp/zorp_https[14032]: core.session(5): (svc/intra_Keybridge_HTTPS_inter): Starting service; name='intra_Keybridge_HTTPS_inter'
> Apr 13 16:02:35 squeeze-zorp39gpl zorp/zorp_https[14032]: core.session(3): (svc/intra_Keybridge_HTTPS_inter:0): Starting proxy instance; client_fd='15', client_address
> ='AF_INET(192.168.2.1:1302)', client_zone='Zone(intranet, 192.168.2.0/24)', client_local='AF_INET(195.228.112.250:443)', client_protocol='TCP'
> Apr 13 16:02:35 squeeze-zorp39gpl zorp/zorp_https[14032]: core.session(5): (svc/intra_Keybridge_HTTPS_inter:0/http): Proxy starting; class='KeybridgeStrongHttpsProxy',
>  proxy='http'
> Apr 13 16:02:56 squeeze-zorp39gpl zorp/zorp_https[14032]: core.accounting(4): (svc/intra_Keybridge_HTTPS_inter:0/http): accounting info; type='ZStreamFD', duration='0'
> , sent='0', received='0'
> Apr 13 16:02:56 squeeze-zorp39gpl zorp/zorp_https[14032]: core.session(3): (svc/intra_Keybridge_HTTPS_inter:0/http): Server connection failure; server_address='AF_INET
> (195.228.112.250:443)', server_zone='Zone(internet, 0.0.0.0/0)', server_local='None', server_protocol='TCP'
> Apr 13 16:02:56 squeeze-zorp39gpl zorp/zorp_https[14032]: core.error(3): (svc/intra_Keybridge_HTTPS_inter:0/http): Server connection failed to establish, giving up;
> Apr 13 16:02:56 squeeze-zorp39gpl zorp/zorp_https[14032]: core.accounting(4): (svc/intra_Keybridge_HTTPS_inter:0/http/client): accounting info; type='ZStreamSsl', dura
> tion='21', sent='0', received='0'
> Apr 13 16:02:56 squeeze-zorp39gpl zorp/zorp_https[14032]: core.session(5): (svc/intra_Keybridge_HTTPS_inter:0/http): Proxy ending; class='KeybridgeStrongHttpsProxy', m
> odule='http'
> Apr 13 16:02:56 squeeze-zorp39gpl zorp/zorp_https[14032]: core.session(4): (svc/intra_Keybridge_HTTPS_inter:0): Ending proxy instance;
> 
> Az otpbankot probaltam elerni, es tutira elerheto, mert egy masik
> (nem virtualis) geprol megneztem kozben.

Valtozik a helyzet, ha a forge_addr-ot kikapcsolod erre a service-re? (A
logbol az latszik, hogy a Zorp nem tudott kapcsolodni. Meg kellene
nezned egy tcpdump-ot, hogy mi tortenik pontosan.)

-- 
KOVACS Krisztian


További információk a(z) zorp-hu levelezőlistáról