SSL or Crypto Error Message

[former_member409912]

Hi experts,

The ASE 15.5 log is throwing the following error:

00:02:00000:00073:2016/05/09 05:02:31.79 kernel  SSL or Crypto Error Info: psn -1, vsn -1, sockp 0 error id 96, severity -2, provide

r id 2.

00:02:00000:00073:2016/05/09 05:02:31.80 kernel  SSL or Crypto Error Message: 'An unexpected failure occurred while performing an Op

enSSL cryptography operation.  Root error: error:0606506D:digital envelope routines:EVP_DecryptFinal_ex:wrong final block length.'.

I'm new on sybase, does anybody have any idea what the issue could be?

Thank you

[former_member409912]

Hi Jack,

Actually this is a new job, i have just a week in my new job so i don't have a complete view on how the database is configured and how it works.

Regarding the link you attached i'm afraid i can not see it as user/password is required to enter to the site.

Anyway thank you for your answer..

[c_baker]

Is this a new ASE 15.5 installation?

Older installations allowed the 'sa' password to be blank (null).  During installation, 'sa' is also often used for the Job Scheduler to log into the ASE.

Essentially, the resolution to the KBA is to assign a proper password to the Job Scheduler login (an if 'sa' is that login - to 'sa' as well).

Empty passwords are no longer allowed for 'sa' during ASE installations, but for older ASE versions, they were allowed during installation.

ASE 15.5 is also no longer supported and is EOL.  You should consider upgrading to ASE 16.

Chris

[former_member409912]

The ASE 15.5 installation is old, it's from 2012 that's why i'm a little bit surprised for this error.

There were no changes in the ASE configuration so i don't understand why the error appears now.

You suggets that the following error:

00:02:00000:00073:2016/05/09 05:02:31.80 kernel  SSL or Crypto Error Message: 'An unexpected failure occurred while performing an Op

enSSL cryptography operation.  Root error: error:0606506D:digital envelope routines:EVP_DecryptFinal_ex:wrong final block length.'.

is due to the missing password for 'sa' user for Job Scheduler or may be is something else?

[former_member229302]

Hi Erion,

Are you trying to enable SSL in ASE?

Jack

[former_member409912]

Hello,

Finaly i found the source of the error message.

I found the following info:

------

Description

An OpenSSL error, "SSL or Crypto Error Info: psn -1, vsn -1, sockp (nil) error id 96, severity -2, provider id 2. SSL or Crypto Error Message: 'An unexpected failure occurred while performing an OpenSSL cryptography operation. Root error: error:0606506D:digital envelope routines:EVP_DecryptFinal_ex:wrong final block length'", may be reported while dumping the transaction log.

Workaround Description

There is a workaround for SYBASE backupserver sp_serveroption SYB_BACKUP, "net password encryption", "true" or done manually via update sysservers set srvstatus=srvstatus+2 where srvname="SYB_BACKUP"

--------

Thank you all for your responses

[former_member229302]

Hi Erion,

I will create a KBA for this.  This falls under CR648848

Thanks Much,

Jack

[former_member229302]

Hi Erion,

Take a look at KBA: 2076475 - SAP ASE reports csi_cipher_crypto error in serverlog when ASE tries to decrypt null passwo...

Are you using Null Passwords??

Jack