Re: [Proftpd-user] [EXTERNAL] Re: mod_tls unexpected OpenSSL error, disconnecting

TJ,

I enabled TraceLOg in Proftpd and then had my user test. He reported that he was seeing several disconnects. Here is what I captured from the messages and tls.log file:

149080:2020-03-25T14:38:13.248651+00:00 **SERVER_NAME** proftpd[3889]: localhost (pool-96-244-147-102.bltmmd.fios.verizon.net[96.244.147.102]) - mod_tls/2.9: unexpected OpenSSL error, disconnecting
149082:2020-03-25T14:38:16.987985+00:00 **SERVER_NAME** proftpd[4084]: localhost (pool-96-244-147-102.bltmmd.fios.verizon.net[96.244.147.102]) - mod_tls/2.9: unexpected OpenSSL error, disconnecting


2020-03-25 14:30:46,760 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,768 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,768 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,775 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,782 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,783 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,783 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,791 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,792 mod_tls/2.9[48119]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:46,792 mod_tls/2.9[48119]: [msg] sent TLSv1.2 warning 'close_notify' Alert message (2 bytes)
2020-03-25 14:30:46,792 mod_tls/2.9[48119]: [info] writing: SSL/TLS alert warning: close notify
2020-03-25 14:30:48,196 mod_tls/2.9[48123]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:48,196 mod_tls/2.9[48123]: panic: SSL_ERROR_SYSCALL, line 10316: system error: Broken pipe
2020-03-25 14:30:48,196 mod_tls/2.9[48123]: unexpected OpenSSL error, disconnecting
2020-03-25 14:30:48,196 mod_tls/2.9[48123]: [msg] sent protocol record message (5 bytes)
2020-03-25 14:30:48,196 mod_tls/2.9[48123]: [msg] sent TLSv1.2 warning 'close_notify' Alert message (2 bytes)
2020-03-25 14:30:48,196 mod_tls/2.9[48123]: [info] writing: SSL/TLS alert warning: close notify

Thank you for your help.

UR.

-----Original Message-----
From: TJ Saunders <[email protected]> 
Sent: Tuesday, March 24, 2020 10:29 AM
To: Jesse Stroik via Proftp-user <[email protected]>
Subject: [EXTERNAL] Re: [Proftpd-user] mod_tls unexpected OpenSSL error, disconnecting


> We are seeing the following disconnects on the /var/log/messages file
> 
> Mar 24 07:23:42 gs672-surya proftpd[16987]: localhost
> (***.***.***[***.***.***]) - mod_tls/2.8: unexpected OpenSSL error, 
> disconnecting
> 
> Mar 24 07:23:43 gs672-surya proftpd[16990]: localhost
> (***.***.***[***.***.***]) - mod_tls/2.8: unexpected OpenSSL error, 
> disconnecting
> 
> Mar 24 08:05:07 gs672-surya proftpd[28159]: localhost
> (***.***.***[***.***.***]) - mod_tls/2.8: unexpected OpenSSL error, 
> disconnecting
> 
> I upgraded Proftpd to the latest version 1.3.7rc3 but users are still 
> seeing these disconnects. Has anyone out there having seeing having 
> this issue?

I think we will need some more information in order to help better.  Could you configure logging for mod_tls, using the following:

  <IfModule mod_tls.c>
    TLSLog /var/log/proftpd/tls.log
    TraceLog /var/log/proftpd/tls.log
    Trace tls:20
  </IfModule>

This configures both the normal mod_tls logging AND trace logging; the resulting log file could grow quite large, but will hopefully provide more details on these errors.

TJ


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.proftpd.org_list-2Dunsub.html&d=DwICAg&c=ApwzowJNAKKw3xye91w7BE1XMRKi2LN9kiMk5Csz9Zk&r=_PbJdGqESxb4LeUrghLRI8P-Cax353zDEnqGLRxjtQU&m=rRIf1oCNbVi26aX3hY4IWO5cbJbXsnyq6kBTAn3bPyg&s=jihHZnq2n1sasJmMOKgJdXaDQSxpjKbv-9FMXyNpUiY&e= 


_______________________________________________
ProFTPD Users List   <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html