[stunnel-users] Stunnel blocks booting process when no network connectivity

Mon Sep 24 17:53:39 CEST 2012

###########################################################
# The config file:
###########################################################
; change the UID and GID of the process for security reasons
setuid = stunnel4
setgid = stunnel4

; The PID file
pid = /var/lib/stunnel4/stunnel.pid

; Certificate
CAfile=/somewhere/ca.crt
cert=/somewhere/cert.pem
verify=2

; enable client mode
client = yes

; Debug
debug = 3
output = /somewhere/stunnel.log

; Configure our services

[someservice]
accept=12121
connect=stunnel.mydomain.com:12121
delay=NO

;seconds to wait for expected data
TIMEOUTbusy=10
;seconds to wait for close_notify (set to 0 for buggy MSIE)
TIMEOUTclose=10
;seconds to connect remote host (10 seconds)
TIMEOUTconnect=10
;seconds to keep an idle connection (1 hour)
TIMEOUTidle=3600

###########################################################


###########################################################
# The ltrace relevant part
###########################################################
11827 memcpy(0x7fff220a6110, "connect=stunnel.mydomain.com:12121"...,
16384)                                                        =
0x7fff220a6110
11827 __ctype_b_loc()
                                                           =
0x7f1c27d7c6b8
11827 strlen("connect=stunnel.mydomain.com:12121"...)
                                                             = 33
11827 strchr("connect=stunnel.mydomain.com:12121"..., '=')
                                                             =
"=stunnel.mydomain.com:12121"
11827 strlen("connect")
                                                           = 7
11827 strcasecmp("connect", "accept")
                                                           = 2
11827 strcasecmp("connect", "CApath")
                                                           = 14
11827 strcasecmp("connect", "CAfile")
                                                           = 14
11827 strcasecmp("connect", "cert")
                                                           = 10
11827 strcasecmp("connect", "ciphers")
                                                           = 6
11827 strcasecmp("connect", "client")
                                                           = 3
11827 strcasecmp("connect", "connect")
                                                           = 0
11827 strlen("stunnel.mydomain.com:12121")
                                                            = 25
11827 pthread_getspecific(0, 0x415374, 80, 24, 0)
                                                           = 0x2614820
11827 calloc(1, 84)
                                                           =
0x02618870
11827 strcpy(0x026188a0, "stunnel.mydomain.com:12121")
                                                            =
0x026188a0
11827 strlen("stunnel.mydomain.com:12121")
                                                            = 25
11827 pthread_getspecific(0, 0x415374, 80, 24, 88)
                                                           = 0x2614820
11827 calloc(1, 84)
                                                           =
0x026188d0
11827 strcpy(0x02618900, "stunnel.mydomain.com:12121")
                                                            =
0x02618900
11827 strrchr("stunnel.mydomain.com:12121", ':')
                                                            = ":12121"
11827 getaddrinfo("stunnel.mydomain.com", "12121", 0x7fff220a2060,
0x7fff220a2058 <unfinished ...>
11827 --- SIGINT (Interrupt) ---
11827 +++ killed by SIGINT +++

###########################################################

On Mon, Sep 24, 2012 at 5:14 PM, Michal Trojnara
<Michal.Trojnara at mirt.net> wrote:
> On Monday, 24 of September 2012, Muschi Stevenson wrote:
>> I left the strace running for roughly 2 hours and the machine still didn't
>> boot.
>
> It looks like getaddrinfo() library function returns EAI_AGAIN intead of a
> permanent error on your system.  Can you please send us your configuration file
> (I expect the error may depend on the order of options) and the output of
> ltrace (the usage is similar to strace)?
>
> Mike
>
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at stunnel.org
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
>