github-starred/barrier

Fork 0

mirror of https://github.com/debauchee/barrier.git synced 2026-05-15 14:16:02 -06:00

[GH-ISSUE #1438] SSL not working in 2.4.0 running on Linux #1104

New issue

Open

opened 2026-05-05 07:29:15 -06:00 by gitea-mirror · 6 comments

gitea-mirror commented

2026-05-05 07:29:15 -06:00

Owner

Originally created by @elhennig on GitHub (Nov 18, 2021).
Original GitHub issue: https://github.com/debauchee/barrier/issues/1438

What happened?

I upgraded barrier to 2.4.0 on the Linux client and server (both packages came from opensuse build service) and after that the client stated in the log the the server certificate fingerprint could not be verified.
Current workaround is to switch off SSL

Version

v2.4.0

Git commit hash (if applicable)

No response

If applicable, where did you install Barrier from?

OpenSUSE Build service

What OSes are you seeing the problem on? (Check all that apply)

Linux

What OS versions are you using?

OpenSIUSE Leap 15.3

Relevant log output

Client:
[2021-11-18T08:12:51] ERROR: failed to verify server certificate fingerprint

Server:
[2021-11-18T08:12:51] INFO: OpenSSL 1.1.1d  10 Sep 2019
	/data/software/Tools/barrier/src/lib/net/SecureSocket.cpp,853
[2021-11-18T08:12:51] INFO: accepted secure socket
	/data/software/Tools/barrier/src/lib/net/SecureSocket.cpp,447
[2021-11-18T08:12:51] INFO: TLS_AES_256_GCM_SHA384  TLSv1.3 Kx=any      Au=any  Enc=AESGCM(256) Mac=AEAD
	/data/software/Tools/barrier/src/lib/net/SecureSocket.cpp,869
[2021-11-18T08:12:51] NOTE: accepted client connection
	/data/software/Tools/barrier/src/lib/server/ClientListener.cpp,152
[2021-11-18T08:13:06] NOTE: new client disconnected

Any other information

No response

Originally created by @elhennig on GitHub (Nov 18, 2021). Original GitHub issue: https://github.com/debauchee/barrier/issues/1438 ### What happened? I upgraded barrier to 2.4.0 on the Linux client and server (both packages came from opensuse build service) and after that the client stated in the log the the server certificate fingerprint could not be verified. Current workaround is to switch off SSL ### Version v2.4.0 ### Git commit hash (if applicable) _No response_ ### If applicable, where did you install Barrier from? OpenSUSE Build service ### What OSes are you seeing the problem on? (Check all that apply) Linux ### What OS versions are you using? OpenSIUSE Leap 15.3 ### Relevant log output ```shell Client: [2021-11-18T08:12:51] ERROR: failed to verify server certificate fingerprint Server: [2021-11-18T08:12:51] INFO: OpenSSL 1.1.1d 10 Sep 2019 /data/software/Tools/barrier/src/lib/net/SecureSocket.cpp,853 [2021-11-18T08:12:51] INFO: accepted secure socket /data/software/Tools/barrier/src/lib/net/SecureSocket.cpp,447 [2021-11-18T08:12:51] INFO: TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD /data/software/Tools/barrier/src/lib/net/SecureSocket.cpp,869 [2021-11-18T08:12:51] NOTE: accepted client connection /data/software/Tools/barrier/src/lib/server/ClientListener.cpp,152 [2021-11-18T08:13:06] NOTE: new client disconnected ``` ### Any other information _No response_

gitea-mirror commented

2026-05-05 07:29:17 -06:00

Author

Owner

@ailabktw commented on GitHub (Nov 19, 2021):

I got same issue on Windows10, 11

@ailabktw commented on GitHub (Nov 19, 2021): I got same issue on Windows10, 11

gitea-mirror commented

2026-05-05 07:29:19 -06:00

Author

Owner

@elhennig commented on GitHub (Nov 19, 2021):

I just tried, if this works, if I build the tool on the server and the client from source. However the behavior is the same as with the rpm package from OBS.

@elhennig commented on GitHub (Nov 19, 2021): I just tried, if this works, if I build the tool on the server and the client from source. However the behavior is the same as with the rpm package from OBS.

gitea-mirror commented

2026-05-05 07:29:19 -06:00

Author

Owner

@ExpandingMan commented on GitHub (Nov 19, 2021):

I'm having similar issues. The GUI doesn't seem to want to generate the keys it just says "SSL disabled". I tried deleting all of the configs and keys but this did not help.

@ExpandingMan commented on GitHub (Nov 19, 2021): I'm having similar issues. The GUI doesn't seem to want to generate the keys it just says "SSL disabled". I tried deleting all of the configs and keys but this did not help.

gitea-mirror commented

2026-05-05 07:29:20 -06:00

Author

Owner

@albertony commented on GitHub (Nov 19, 2021):

I think this is fixed by https://github.com/debauchee/barrier/pull/1425

@albertony commented on GitHub (Nov 19, 2021): I think this is fixed by https://github.com/debauchee/barrier/pull/1425

gitea-mirror commented

2026-05-05 07:29:21 -06:00

Author

Owner

@ExpandingMan commented on GitHub (Nov 19, 2021):

I worked around this on 2.4 by following the documentation for generating the key, though it was not without incident, see here.

I do however still need --disable-client-cert-checking, which I can't seem to get working. There doesn't appear to be any documentation on that, and the GUI doesn't seem to want to handle it correctly for me.

@ExpandingMan commented on GitHub (Nov 19, 2021): I worked around this on 2.4 by following the documentation for generating the key, though it was not without incident, see [here](https://github.com/debauchee/barrier/issues/1441). I do however still need `--disable-client-cert-checking`, which I can't seem to get working. There doesn't appear to be any documentation on that, and the GUI doesn't seem to want to handle it correctly for me.

gitea-mirror commented

2026-05-05 07:29:21 -06:00

Author

Owner

@albertony commented on GitHub (Nov 19, 2021):

I have a pull request updating the documentation: https://github.com/debauchee/barrier-wiki/pull/8

You can see the new docs here: f5f2751243/Command-Line.md (ssl_config)

@albertony commented on GitHub (Nov 19, 2021): I have a pull request updating the documentation: https://github.com/debauchee/barrier-wiki/pull/8 You can see the new docs here: https://github.com/debauchee/barrier-wiki/blob/f5f2751243f2af084f42ed5b50d676b538f6d81e/Command-Line.md#ssl_config

No labels

Rows
Columns