[Bug 57492] New: Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

Bug ID: 57492
           Summary: Players can't join Astroneer dedicated server with
                    enabled encryption because BCryptExportKey encryption
                    of key not yet supported
           Product: Wine
           Version: 9.22
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: bcrypt
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

The problem occurs when running an Astroneer dedicated server or the game
client using WINE while having encryption not disabled on at least one side
(which is required from some platforms to join).
In that case, when a player tries to join, they will not be able to connect and
the following message is printed by WINE:

```
0170:fixme:bcrypt:BCryptExportKey encryption of key not yet supported
```

This was tested using WINE staging 9.22 and GnuTLS 3.8.3 (which was causing
problems before this issue) and a game client running on Windows.

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

Ker noa  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #1 from Hans Leidekker  ---
Thanks. Can you attach a WINEDEBUG=+bcrypt log?

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #2 from [e-mail] ---
Created attachment 77519
  --> https://bugs.winehq.org/attachment.cgi?id=77519
Log of starting the dedicated server with WINEDEBUG=+bcrypt

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #3 from [e-mail] ---
(In reply to Hans Leidekker from comment #1)
> Thanks. Can you attach a WINEDEBUG=+bcrypt log?

Sure, I've attached the output that was created when running the dedicated
server with the wine option and letting a player try to join, which causes the
error to be printed.

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #4 from Hans Leidekker  ---
Created attachment 77520
  --> https://bugs.winehq.org/attachment.cgi?id=77520
patch

This patch adds a couple of traces. Would you be able to apply this and get
another WINEDEBUG=+bcrypt log?

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #5 from [e-mail] ---
Created attachment 77522
  --> https://bugs.winehq.org/attachment.cgi?id=77522
Log of starting the dedicated server with WINEDEBUG=+bcrypt using the provided
patch

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #6 from [e-mail] ---
(In reply to Hans Leidekker from comment #4)
> Created attachment 77520 [details]
> patch
>
> This patch adds a couple of traces. Would you be able to apply this and get
> another WINEDEBUG=+bcrypt log?

I applied the patch to current WINE git and ran the dedicated server with the
compiled wine (version wine-9.22-123-gde071d76c45).
This is my first time compiling WINE, so I hope I didn't screw it up somehow.
The output log can be found in the new attachement I added. I also added a note
to the log at the point at which the player joined.

If I need to do anything different or the patch didn't work correctly, please
tell me, so I can try to fix it.

Thanks in advance!

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #7 from [e-mail] ---
(In reply to Hans Leidekker from comment #4)
> Created attachment 77520 [details]
> patch
>
> This patch adds a couple of traces. Would you be able to apply this and get
> another WINEDEBUG=+bcrypt log?

Sorry to bump this, but have you had the time to look at the logs I send and
did that help in any way?

Can I do something else to help resolve this issue, as it would be very
beneficial for the dedicated server community for Astroneer?

Thanks in advance!

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #8 from Hans Leidekker  ---
(In reply to joejoetv from comment #7)
> (In reply to Hans Leidekker from comment #4)
> > Created attachment 77520 [details]
> > patch
> >
> > This patch adds a couple of traces. Would you be able to apply this and get
> > another WINEDEBUG=+bcrypt log?
>
> Sorry to bump this, but have you had the time to look at the logs I send and
> did that help in any way?
>
> Can I do something else to help resolve this issue, as it would be very
> beneficial for the dedicated server community for Astroneer?

The log reveals that it wants to export an encrypted AES key using the
Rfc3565KeyWrapBlob format. I don't have time to work on this at the moment.
Patches are welcome.

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #9 from [e-mail] ---
(In reply to Hans Leidekker from comment #8)
> (In reply to joejoetv from comment #7)
> > (In reply to Hans Leidekker from comment #4)
> > > Created attachment 77520 [details]
> > > patch
> > >
> > > This patch adds a couple of traces. Would you be able to apply this and get
> > > another WINEDEBUG=+bcrypt log?
> >
> > Sorry to bump this, but have you had the time to look at the logs I send and
> > did that help in any way?
> >
> > Can I do something else to help resolve this issue, as it would be very
> > beneficial for the dedicated server community for Astroneer?
>
> The log reveals that it wants to export an encrypted AES key using the
> Rfc3565KeyWrapBlob format. I don't have time to work on this at the moment.
> Patches are welcome.

Thank you for the reply and I did not mean to

I don't think I have enough knowledge of the WINE codebase or the Windows APIs
to contribute here (at least not currently), but I'm glad that the logs at
least gave something away.

Thank you for your work anyway and I did not mean to rush.

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
     Ever confirmed|0                           |1
             Status|UNCONFIRMED                 |NEW
           Keywords|                            |patch

--- Comment #10 from Dmitry Timoshkov  ---
I sent https://gitlab.winehq.org/wine/wine/-/merge_requests/5068 that adds
support for Rfc3565KeyWrapBlob, however Hans thinks that it's not a proper
solution. Still, it would be nice to test, or even probably included in
wine-staging.

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=57492

--- Comment #11 from Dmitry Timoshkov  ---
(In reply to Dmitry Timoshkov from comment #10)
> I sent https://gitlab.winehq.org/wine/wine/-/merge_requests/5068 that adds
> support for Rfc3565KeyWrapBlob, however Hans thinks that it's not a proper
> solution. Still, it would be nice to test, or even probably included in
> wine-staging.

Correct link to the MR is
https://gitlab.winehq.org/wine/wine/-/merge_requests/7723

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=57492

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
      Fixed by SHA1|                            |d25a6f837f4a7b1d455ce4d1765
                   |                            |e69bddca2208a
             Status|NEW                         |RESOLVED

--- Comment #12 from Dmitry Timoshkov  ---
Support for 128-bit AES keys was added in commits
c427b4e9b340d4683f18186fe7c9b658e83fae85
ec45d013345b3da6d5d13a8005061a89bea5b02f
which are part of wine-10.5, and commits
d25a6f837f4a7b1d455ce4d1765e69bddca2208a
7b3657cd164114e065b396a4579a022c74b1291b
added support for 192 and 256-bit keys, they will be included in wine-10.6.

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=57492

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
      Fixed by SHA1|d25a6f837f4a7b1d455ce4d1765 |7b3657cd164114e065b396a4579
                   |e69bddca2208a               |a022c74b1291b

[Bug 57492] Players can't join Astroneer dedicated server with enabled encryption because BCryptExportKey encryption of key not yet supported

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=57492

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #13 from Alexandre Julliard  ---
Closing bugs fixed in 10.6.