[zeromq-dev] stonehouse and ironhouse examples - crypto being ignored in examples?

Pieter Hintjens ph at imatix.com
Fri Mar 7 17:25:08 CET 2014


Ah...

"Stonehouse test OK"

So (1) please confirm the current CZMQ github master does work for you.
and (2) I'll check what's broken in the czmq-2.0.3 release

On Fri, Mar 7, 2014 at 5:23 PM, Pieter Hintjens <ph at imatix.com> wrote:
> OK, using zeromq-4.0.3.tar.gz and czmq master, I get:
>
> I: DENIED (not in whitelist) address=127.0.0.1
> I: DENIED (not in whitelist) address=127.0.0.1
> I: DENIED (not in whitelist) address=127.0.0.1
> ...
>
> as expected.
>
> Next, testing the current stable CZMQ...
>
> On Fri, Mar 7, 2014 at 5:18 PM, Pieter Hintjens <ph at imatix.com> wrote:
>> I'm using the latest git master.
>>
>> Changing the zauth_allow() call as you suggest gives me this response:
>>
>> I: DENIED (not in whitelist) address=127.0.0.1
>> CURVE I: ZAP handler rejected client authentication
>> I: DENIED (not in whitelist) address=127.0.0.1
>> CURVE I: ZAP handler rejected client authentication
>> I: DENIED (not in whitelist) address=127.0.0.1
>> ...
>>
>> (with "I: DENIED" trace output from libzmq, and CURVE I: output from CZMQ)
>>
>> I might prefix the libzmq output to make it clearer.
>>
>> Next step, I'll try the older packages.
>>
>> -Pieter
>>
>> On Fri, Mar 7, 2014 at 3:06 PM, Turkey Breast <turkeybreast at yahoo.com> wrote:
>>> I've installed a brand new Debian wheezy, and installed these packages:
>>>
>>> czmq-2.0.3.tar.gz
>>> libsodium-0.4.5.tar.gz
>>> zeromq-4.0.3.tar.gz
>>>
>>> If I change the zauth_allow() call to a random IP address then the example still passes. Normally I expect it to refuse the connection from localhost since it isn't part of the whitelist:
>>>
>>>   zauth_allow (auth, "8.5.3.6");
>>>
>>> And in ironhouse2.c if I comment out the line where it saves the client's public key (which is loaded by the server_task), the server still accepts the client connection despite not having the public key!
>>>
>>> This is a standard Debian wheezy install from scratch (nothing configured) using all the latest stable packages.
>>> _______________________________________________
>>> zeromq-dev mailing list
>>> zeromq-dev at lists.zeromq.org
>>> http://lists.zeromq.org/mailman/listinfo/zeromq-dev



More information about the zeromq-dev mailing list