[stunnel-users] help

Michal Trojnara Michal.Trojnara at mirt.net
Thu Mar 24 18:57:54 CET 2005


Hello,

> 2005.03.24 15:04:11 LOG6[3392:2556]: Negotiated ciphers: AES256-SHA    
>           SSLv3 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA1
> 2005.03.24 15:04:27 LOG7[3392:2556]: SSL alert (write): fatal: bad 
> record mac
> 2005.03.24 15:04:27 LOG3[3392:2556]: SSL_read: 1408F455: 
> error:1408F455:SSL routines:SSL3_GET_RECORD:decryption failed or bad 
> record mac

It looks like an SSL protocol incompatibility.

You could try a stream cipher:
     ciphers = RC4-MD5
or additional padding:
     options = SSL_OP_TLS_BLOCK_PADDING_BUG

Best regards,
     Mike




More information about the stunnel-users mailing list