[stunnel-users] Problem in stunnel log

sawbona at xsmail.com sawbona at xsmail.com
Thu Feb 6 11:30:02 CET 2014


Good morning:

This connection was working perfectly well up until yesterday.

Now it fails and I get this text in the log:
(date/time snipped for brevity's sake)

---

LOG5[648:980]: FIPS mode is enabled
LOG5[648:980]: Configuration successful
LOG5[648:2448]: Service [gmx-POP3-SSL] accepted connection from 
127.0.0.1:1212

LOG5[648:2448]: connect_blocking: connected xxx.xxx.xxx.xxx:995
LOG5[648:2448]: Service [gmx-POP3-SSL] connected remote server from
192.168.1.136:1213

LOG4[648:2448]: CERT: Verification error: self signed certificate in
certificate chain

LOG4[648:2448]: Certificate check failed: depth=2, /C=DE/O=Deutsche
Telekom AG/OU=T-TeleSec Trust Center/CN=Deutsche Telekom Root CA 2

LOG3[648:2448]: SSL_connect: 14090086: error:14090086:SSL 
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

LOG5[648:2448]: Connection reset: 0 byte(s) sent to SSL, 0 byte(s) sent
to socket 

---

What has happened?
I have not changed anything ...

This is the stunnel.conf bit:

---

[gmx-POP3-SSL]
client = yes
accept = 20995
connect = pop.gmx.net:995
CAfile = peer-gmx-POP3-SSL.pem
verify = 3 

[gmx-smtp-SSL]
client = yes
accept = 20465
connect = mail.gmx.net:465

[gmx-IMAP-SSL]
client = yes
accept = 20993
connect = imap.gmx.net:993

---

Is it 'me' or is it 'them'?

Thanks in advance for any input.
Best regards.




More information about the stunnel-users mailing list