Connection failure with server certificate.

[hoffmabc]

I've set up the libbitcoin-server with encryption using the wiki instructions, but whenever trying to connect to the server from bx I receive the following error:

CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch
CURVE I: cannot open client INITIATE vouch

I'm not using client authentication.

[evoskuil]

Hey, @hoffmabc - did you figure this one out?

[hoffmabc]

I'm not really sure why it stopped occurring. It was happening quite a bit and then just stopped. Since I couldn't replicate I closed it.

[evoskuil]

Okay, thanks for letting us know.

[evoskuil]

I'm going to keep this open to track the issue.

[hoffmabc]

Ok if it occurs again I'm going to provide more info.

[evoskuil]

I'm able to reproduce this with version2 and a current release build of the zmq dependencies, with both client and server in the msvc debugger. All of the parameterization looks correct, so the cause is still eluding me.

[evoskuil]

Repro

Server

#include <czmq++/czmqpp.hpp>

int main()
{
    czmqpp::context context;
    czmqpp::socket socket(context, ZMQ_ROUTER);
    assert(socket.self() != nullptr);

    czmqpp::authenticator authenticate(context);
    authenticate.set_verbose(true);
    std::string client_certs(CURVE_ALLOW_ANY);
    authenticate.configure_curve("*", client_certs);

    // static const auto public_key = "rq:rM>}U?@Lns47E1%kR.o@n%FcmmsL/@{H8]yf7";
    // static const auto secret_key = "JTKVSB%%)wK0E.X)V>+}o?pNmC{O&4W4b!Ni{Lh6";

    int as_server = 1;
    socket.set_curve_server(as_server);
    // zmq_setsockopt(socket.self(), ZMQ_CURVE_SERVER, &as_server, sizeof(int));

    czmqpp::certificate certificate("C:\\ProgramData\\libbitcoin\\cert.txt");
    assert(certificate.valid());
    certificate.apply(socket);
    // zmq_setsockopt(socket.self(), ZMQ_CURVE_PUBLICKEY, public_key, strlen(public_key));
    // zmq_setsockopt(socket.self(), ZMQ_CURVE_SECRETKEY, secret_key, strlen(secret_key));

    auto connected = socket.bind("tcp://*:9091");
    assert(connected == 9091);

    czmqpp::poller poller(socket);
    assert(poller.self() != nullptr);

    czmqpp::socket which = poller.wait(100000);
    assert(which == socket);

    czmqpp::message message;
    message.receive(socket);
}

Client

#include <czmq++/czmqpp.hpp>

int main()
{
    czmqpp::context context;
    czmqpp::socket socket(context, ZMQ_DEALER);
    assert(socket.self() != nullptr);

    static const auto public_key = "rq:rM>}U?@Lns47E1%kR.o@n%FcmmsL/@{H8]yf7";
    socket.set_curve_serverkey(public_key);
    //zmq_setsockopt(socket.self(), ZMQ_CURVE_SERVERKEY, public_key, strlen(public_key));

    auto connected = socket.connect("tcp://localhost:9091");
    assert(connected == 0);

    czmqpp::message message;

    // "blockchain.fetch_last_height"
    message.append(
    {
        0x62, 0x6c, 0x6f, 0x63, 0x6b, 0x63, 0x68, 0x61, 0x69,
        0x6e, 0x2e, 0x66, 0x65, 0x74, 0x63, 0x68, 0x5f, 0x6c,
        0x61, 0x73, 0x74, 0x5f, 0x68, 0x65, 0x69, 0x67, 0x68,
        0x74
    });

    // int(1)
    message.append({ 0x01, 0x00, 0x00, 0x00 });

    // data{}
    message.append({});

    auto sent = message.send(socket);
    assert(sent);

    czmqpp::poller poller(socket);
    poller.wait(1000);
}

[evoskuil]

I have some feedback on this from ZeroMQ folks, need some to work through it though.