Projekt

Allgemein

Profil

Aktionen

Bug #3

geschlossen

fiducia.de HBCI Endpoint stopped working

Von Anonym vor mehr als 7 Jahren hinzugefügt. Vor mehr als 7 Jahren aktualisiert.

Status:
Closed
Priorität:
Normal
Kategorie:
-
Beginn:
19.03.2018
Abgabedatum:
Betriebssystem:
AqBanking-Version:
Anwendung:
Version der Anwendung:

Beschreibung

AqBanking Version: 5.7.6
Gwenhywfar: 4.18.0

HBCI URL setup command: aqhbci-tool4 adduser -s https://hbci11.fiducia.de/cgi-bin/hbciservlet -b 67230000 -u [MY_CUSTOMER_NUMBER] -N [MY_BANK_ACCOUNTNUMBER] -t pintan --hbciversion=300
Second setup command: aqhbci-tool4 adduserflags -f forceSsl3 -c [MY_CUSTOMER_NUMBER]

Now running getsysid with: aqhbci-tool4 -A -P pinfile getsysid -c [MY_CUSTOMER_NUMBER]

this fails since a few weeks with following error:

Locking users
Locking user [MY_CUSTOMER_NUMBER]
Executing HBCI jobs
AqHBCI started
There are no tan method descriptions (yet), trying One-Step TAN.
Encoding queue
Sending queue
Connecting to server...
Resolving hostname "hbci11.fiducia.de" ...
IP address is "195.200.35.18" 
Connecting to "hbci11.fiducia.de" 
Connected to "hbci11.fiducia.de" 
Using GnuTLS default ciphers.
TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-256-GCM:AEAD
5:2018/03/19 19-47-39:aqbanking(2366):abgui.c:  165: Automatically accepting certificate [D8:CD:2B:25:0B:6E:97:7A:B2:F3:0D:52:1D:25:BF:A9]
Connected.
Sending message...
Message sent.
Waiting for response
Receiving response...
3:2018/03/19 19-47-39:gwen(2366):syncio_tls.c: 1336: gnutls_record_recv: -110 (The TLS connection was non-properly terminated.)
3:2018/03/19 19-47-39:gwen(2366):syncio_tls.c: 1354: Detected premature disconnect by server (violates specs!)
No message received
Error receiving response (-110)
AqHBCI finished.
3:2018/03/19 19-47-39:aqhbci(2366):provider.c: 1464: Job has no system id and no iTAN results
3:2018/03/19 19-47-39:(null)(2366):getsysid.c:  157: Error getting system id (-1)

For other bank accounts running against other banks it is running fine, but only this bank account it doesn't work. Any idea? I also contacted my bank, even the IT guys over there checked my case, they said, it must be the software, they didn't find any problem on their side.

This suddenly stopped working, i also tried reinstalling everything with latest, no luck.

Aktionen #1

Von martin vor mehr als 7 Jahren aktualisiert

  • Status wurde von New zu In Progress geändert
  • Zugewiesen an wurde auf martin gesetzt

Hi,

it is in fact a problem of the server. It prematurely hangs up a connection without performing the necessary TLS handshake for closing a connection. This is a violation of the specifications, and that's what AqBanking says in the logs.

However, newer versions of AqBanking have a way around this bug. Just execute this:

aqhbci-tool4 adduserflags -b BLZ -f tlsIgnPrematureClose 

and after that AqBanking will ignore this violation.

Could you please report back whether that solves your problem?

Regards
Martin

Aktionen #2

Von Anonym vor mehr als 7 Jahren aktualisiert

Hey cool. Just added the flag, now it is working.

Does this affect my connection in any negative way or can i keep using the flag?

Thanks a lot.

Aktionen #3

Von martin vor mehr als 7 Jahren aktualisiert

  • Status wurde von In Progress zu Closed geändert

Hi,

nope, it just accepts when a server cuts the connection prematurely, no ill side effects known.

Regards
Martin

Aktionen #4

Von martin vor mehr als 7 Jahren aktualisiert

  • % erledigt wurde von 0 zu 100 geändert
Aktionen

Auch abrufbar als: Atom PDF