Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve logging of SSH, TLS issues caused by rekeying #1654

Open
Castaglia opened this issue Apr 9, 2023 · 2 comments
Open

Improve logging of SSH, TLS issues caused by rekeying #1654

Castaglia opened this issue Apr 9, 2023 · 2 comments
Assignees
Milestone

Comments

@Castaglia
Copy link
Member

The scope of this ticket is to try to improve the logging of failures with encrypted channels (specifically TLS and SSH) that occur due to renegotiations/rekeying. Not all TLS or SSH clients handle such situations well, especially if it is the server, and not the client, that initiates such rekeys.

This came up recently on the ProFTPD users mailing list. The key clue in that case was the "upload failures after 2GB of a 4GB file" when using SFTP; that 2GB size aligned with the default SFTPRekey size parameter. However, this correlation is not immediately obvious, and we want to improve the logging to make it obvious.

@Castaglia Castaglia self-assigned this Apr 9, 2023
@Castaglia Castaglia added this to the 1.3.9 milestone Apr 9, 2023
@Castaglia
Copy link
Member Author

Note that this is probably related to Bug#4498.

@Castaglia
Copy link
Member Author

Note that as of Bug#4443, TLS renegotiations are disabled by default. That said, having TLS logging that helps to pinpoint TLS issues related to renegotiations (when enabled) would still be a good thing to have.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant