[stunnel-users] Stunnel 5.17 on AIX

Wed May 6 18:14:03 CEST 2015

I've gotten v5.17 compiled on AIX 5.3 & 6.1 with the following

xlccmp.13.1.0             13.1.0.3  COMMITTED  XL C compiler
openssl.base             1.0.1.513  COMMITTED  Open Secure Socket Layer
IV71446m9a             Ifix for Openssl CVE

Everything seems to have compiled fine. I packaged it up, installed, and
set up a quick config. The server side aborts on me. Debug output follows.
Need some direction on where to look next. Thanks in advance!

2015.05.06 12:08:03 LOG7[ui]: Clients allowed=31999
2015.05.06 12:08:03 LOG5[ui]: stunnel 5.17 on powerpc-ibm-aix5.3.0.0
platform
2015.05.06 12:08:03 LOG5[ui]: Compiled/running with OpenSSL 1.0.1e 11 Feb
2013
2015.05.06 12:08:03 LOG5[ui]: Threading:PTHREAD Sockets:SELECT,IPv6
TLS:ENGINE,OCSP,PSK,SNI
2015.05.06 12:08:03 LOG7[ui]: errno: (*_Errno())
2015.05.06 12:08:03 LOG5[ui]: Reading configuration from file
/opt/freeware/etc/stunnel/stunnel.conf
2015.05.06 12:08:03 LOG5[ui]: UTF-8 byte order mark not detected
2015.05.06 12:08:03 LOG7[ui]: Compression disabled
2015.05.06 12:08:03 LOG7[ui]: Snagged 64 random bytes from //.rnd
2015.05.06 12:08:03 LOG7[ui]: Wrote 1024 new random bytes to //.rnd
2015.05.06 12:08:03 LOG7[ui]: PRNG seeded successfully
2015.05.06 12:08:03 LOG6[ui]: Initializing service [client]
2015.05.06 12:08:03 LOG6[ui]: Loading certificate from file:
/usr/share/ssl/certs/skdkgesaix53-client-cert.pem
2015.05.06 12:08:03 LOG6[ui]: Loading key from file:
/usr/share/ssl/certs/skdkgesaix53-client-key.pem
2015.05.06 12:08:03 LOG7[ui]: Private key check succeeded
2015.05.06 12:08:03 LOG7[ui]: Verify directory set to /usr/share/ssl/certs
2015.05.06 12:08:03 LOG7[ui]: Added /usr/share/ssl/certs revocation lookup
directory
2015.05.06 12:08:03 LOG6[ui]: Peer certificate location /usr/share/ssl/certs
2015.05.06 12:08:03 LOG7[ui]: SSL options: 0x01000004 (+0x03000000,
-0x02000000)
2015.05.06 12:08:03 LOG6[ui]: Initializing service [server]
2015.05.06 12:08:03 LOG6[ui]: Loading certificate from file:
/usr/share/ssl/certs/skdkgesaix53-server-cert.pem
2015.05.06 12:08:03 LOG6[ui]: Loading key from file:
/usr/share/ssl/certs/skdkgesaix53-server-key.pem
2015.05.06 12:08:03 LOG7[ui]: Private key check succeeded
2015.05.06 12:08:03 LOG7[ui]: Verify directory set to /usr/share/ssl/certs
2015.05.06 12:08:03 LOG7[ui]: Added /usr/share/ssl/certs revocation lookup
directory
2015.05.06 12:08:03 LOG6[ui]: Peer certificate location /usr/share/ssl/certs
2015.05.06 12:08:03 LOG7[ui]: DH initialization
2015.05.06 12:08:03 LOG7[ui]: Could not load DH parameters from
/usr/share/ssl/certs/skdkgesaix53-server-cert.pem
2015.05.06 12:08:03 LOG7[ui]: Using hardcoded DH parameters
2015.05.06 12:08:03 LOG7[ui]: DH initialized with 2048-bit key
2015.05.06 12:08:03 LOG7[ui]: ECDH initialization
2015.05.06 12:08:03 LOG7[ui]: ECDH initialized with curve prime256v1
2015.05.06 12:08:03 LOG7[ui]: SSL options: 0x01004004 (+0x03004000,
-0x02000000)
2015.05.06 12:08:03 LOG5[ui]: Configuration successful
2015.05.06 12:08:03 LOG7[ui]: Listening file descriptor created (FD=7)
2015.05.06 12:08:03 LOG7[ui]: Service [client] (FD=7) bound to 127.0.0.1:22
2015.05.06 12:08:03 LOG7[ui]: Listening file descriptor created (FD=8)
2015.05.06 12:08:03 LOG7[ui]: Service [server] (FD=8) bound to
172.26.85.13:2222
2015.05.06 12:08:04 LOG7[main]: Created pid file /var/pid/stunnel.pid
2015.05.06 12:08:29 LOG7[main]: Service [server] accepted (FD=3) from
172.26.85.14:52649
2015.05.06 12:08:29 LOG7[0]: Service [server] started
2015.05.06 12:08:29 LOG5[0]: Service [server] accepted connection from
172.26.85.14:52649
2015.05.06 12:08:29 LOG7[0]: SSL state (accept): before/accept
initialization
2015.05.06 12:08:29 LOG7[0]: SNI: no virtual services defined
2015.05.06 12:08:29 LOG7[0]: SSL state (accept): SSLv3 read client hello A
2015.05.06 12:08:29 LOG7[0]: SSL state (accept): SSLv3 write server hello A
2015.05.06 12:08:29 LOG7[0]: SSL state (accept): SSLv3 write certificate A
INTERNAL ERROR: Bad magic at tls.c, line 182

--Doug
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20150506/8a82e72b/attachment.html>