Page 1 of 1

Unable to start Deluged ('ee key too small' error) on Buster

Posted: Sun Apr 05, 2020 12:26 pm
by francy88
Hi,
I'm on Raspbian and I've upgraded from Stretch to Buster. After that Deluge stops working, so I reinstalled/reconfigured deluged to the latest version without success.
On the log this error appears

[('SSL routines', 'SSL_CTX_use_certificate', 'ee key too small')]

This problems seems similare to the one described here: viewtopic.php?t=55116
I've tried to delete my .config/deluge/ssl as suggested in the above topic, but nothing changed. The only way I found to fix this problem was to edit my global OpenSSL security level (changed on Buster from TLSv1 to TLSv1.2 --> https://www.debian.org/releases/stable/ ... l-defaults). Now my Deluge .key / .cert files are accepted and all works fine.

My question is: why Deluge seems to not respond to this new security level and continues to create the key with the "old" method?

Thanks in advance

Re: Unable to start Deluged ('ee key too small' error) on Buster

Posted: Thu Aug 01, 2024 8:15 pm
by Pko
I've searched for "security level" or "TLS" in my /etc/ssl/openssl.cnf but I found nothing

How do I change the openssl security level?

Thank you

Re: Unable to start Deluged ('ee key too small' error) on Buster

Posted: Sat Aug 03, 2024 2:19 am
by ambipro
Pko wrote: Thu Aug 01, 2024 8:15 pm I've searched for "security level" or "TLS" in my /etc/ssl/openssl.cnf but I found nothing

How do I change the openssl security level?

Thank you
https://askubuntu.com/questions/1233186 ... rity-level

This might help you, should translate to other linux distributions using the same package. Not sure how up to date it is, but is a good jumping off point that explains it.

Googling further if this doesn't resolve based on what is on this page would likely give you your answer for your specific versions if this doesn't help.