[stunnel-users] Problems with Stunnel 4.5*

Mon Dec 12 18:43:01 CET 2011

Yes, i test with openssl 1.0.0 for generate cert. This is the mistake.

The headers are changed :

openssl 1.0.0 key :

-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIJnzBJBgkqhkiG9w0BBQ0wPDAbBgkqhkiG9w0BBQwwDgQI0Z45oYYRJ1cCAggA
MB0GCWCGSAFlAwQBAgQQF4QLI0IILDItqQFXHJeAxgSCCVBAo1Ed9BHwyhHeBzx2
rQELkAghar26CFsP7qvMwZ+vnATbArA2MvFWJWy0l2pl7/Rn7RcoztbSzg82c8IG
...

openssl 0.9.8 key :

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,327E4B06D51C7728

grestO9v2wfiqFwBy8bBbpNjMWpFrrc/9y8q68n6c48enCFyDsdVlyqToOQ+Razt
d98I+rkTow33X83e9+Zt8rGlKJlPXn3zHTKbjNhfc7j6kk+ssWJft5OAvu5NShMx
FOATl4pW97qCf1x4pFwQGm8/8MhCqOpqv2cLfjz2T4Egu1qP2sHZ35QU/gHBLHYh
...

Ludovic.

Le 12/12/2011 15:36, Michal Trojnara a écrit :
> Ludovic LEVET wrote:
>> But i have save the same problem than Sebastian with 4.50.
>> I'm not able to make decrypt my priv key with any ciphers.
>
> Works for me.
>
> Certificate created with:
> openssl.exe req -new -x509 -days 365 -config stunnel.cnf -out 
> stunnel.pem -keyout stunnel.pem
>
> stunnel.cnf from Win32 distribution of stunnel, with "encrypt_key = 
> no" commented out.
>
> I guess you have used some features only available in OpenSSL 1.0.x:
> C:\Program Files\stunnel>openssl genpkey
> openssl:Error: 'genpkey' is an invalid command.
>
> Mike 