<br><br><div class="gmail_quote">On Sat, Apr 7, 2012 at 8:00 PM, <span dir="ltr"><<a href="mailto:stunnel-users-request@stunnel.org">stunnel-users-request@stunnel.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Send stunnel-users mailing list submissions to<br>
<a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://stunnel.mirt.net/mailman/listinfo/stunnel-users" target="_blank">http://stunnel.mirt.net/mailman/listinfo/stunnel-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:stunnel-users-request@stunnel.org">stunnel-users-request@stunnel.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:stunnel-users-owner@stunnel.org">stunnel-users-owner@stunnel.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of stunnel-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: [Stunnel Guru needed] stunnel running, but no longer<br>
serve connection after a while ("Dispatching signals from the<br>
signal pipe" in logs ==> all stops) (Thomas Manson)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Sat, 7 Apr 2012 08:24:46 +0200<br>
From: Thomas Manson <<a href="mailto:dev.mansonthomas@gmail.com">dev.mansonthomas@gmail.com</a>><br>
To: Scott Gifford <<a href="mailto:sgifford@suspectclass.com">sgifford@suspectclass.com</a>><br>
Cc: <a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
Subject: Re: [stunnel-users] [Stunnel Guru needed] stunnel running,<br>
but no longer serve connection after a while ("Dispatching signals<br>
from the signal pipe" in logs ==> all stops)<br>
Message-ID:<br>
<<a href="mailto:CA%2BPenvGYr%2BtTiKsavOgyaLOtoRxUo0nfxuRVDEzdvGDrFpefLg@mail.gmail.com">CA+PenvGYr+tTiKsavOgyaLOtoRxUo0nfxuRVDEzdvGDrFpefLg@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
This bug has been corrected in<br>
<br>
Version 4.38, 2011.06.28, urgency: MEDIUM:<br>
<br>
- New features<br>
- Server-side SNI implemented (RFC 3546 section 3.1) with a new<br>
service-level option "nsi".<br>
- "socket" option also accepts "yes" and "no" for flags.<br>
- Nagle's algorithm is now disabled by default for improved<br>
interactivity.<br>
- Bugfixes<br>
- A compilation fix was added for OpenSSL version < 1.0.0.<br>
- Signal pipe set to non-blocking mode. This bug caused hangs of<br>
stunnel features based on signals, e.g. local mode, FORK threading, or<br>
configuration file reload on Unix. Win32 platform was not affected.<br>
<br>
<br>
however it don't precise from which version it affects stunnel... so my try<br>
with 11.04 is a bit risky, even if 4.29 is quite far from 4.38.<br>
<br>
Maybe upgrading to 12.04 could solve the issue, but I don't like to upgrade<br>
right away (I had some bad surpise ;))<br>
<br>
so compiling from source seems to be the safest option.<br>
<br>
Thomas.<br>
<br>
On Sat, Apr 7, 2012 at 07:58, Thomas Manson <<a href="mailto:dev.mansonthomas@gmail.com">dev.mansonthomas@gmail.com</a>>wrote:<br>
<br>
> i've just checked my setup right now and the funny thing is that I think<br>
> it stopped working exactly at the same second of the same hour & minute of<br>
> the day :<br>
><br>
><br>
> root@ns0:/var/log/stunnel4# ll<br>
> total 940<br>
> drwxr-xr-x 2 stunnel4 stunnel4 4096 2012-04-07 06:25 .<br>
> drwxr-xr-x 14 root root 4096 2012-04-07 06:25 ..<br>
> -rw-r----- 1 stunnel4 stunnel4 0 2012-04-07 06:25<br>
> extranet.serviceplus-hse.com_stunnel.log<br>
> -rw-r----- 1 stunnel4 stunnel4 926267 2012-04-07 06:25<br>
> extranet.serviceplus-hse.com_stunnel.log.1<br>
> -rw-r----- 1 stunnel4 stunnel4 0 2012-04-07 06:25<br>
> mansonthomas.com_stunnel.log<br>
> -rw-r----- 1 stunnel4 stunnel4 5804 2012-04-07 06:25<br>
> mansonthomas.com_stunnel.log.1<br>
> -rw-r----- 1 stunnel4 stunnel4 0 2012-04-07 06:25 stunnel.log<br>
> -rw-r----- 1 stunnel4 stunnel4 11710 2012-04-07 06:25 stunnel.log.1<br>
> root@ns0:/var/log/stunnel4# ll<br>
> total 940<br>
> drwxr-xr-x 2 stunnel4 stunnel4 4096 2012-04-07 06:25 .<br>
> drwxr-xr-x 14 root root 4096 2012-04-07 06:25 ..<br>
> -rw-r----- 1 stunnel4 stunnel4 0 2012-04-07 06:25<br>
> extranet.serviceplus-hse.com_stunnel.log<br>
> -rw-r----- 1 stunnel4 stunnel4 926267 2012-04-07 06:25<br>
> extranet.serviceplus-hse.com_stunnel.log.1<br>
> -rw-r----- 1 stunnel4 stunnel4 0 2012-04-07 06:25<br>
> mansonthomas.com_stunnel.log<br>
> -rw-r----- 1 stunnel4 stunnel4 5804 2012-04-07 06:25<br>
> mansonthomas.com_stunnel.log.1<br>
> -rw-r----- 1 stunnel4 stunnel4 0 2012-04-07 06:25 stunnel.log<br>
> -rw-r----- 1 stunnel4 stunnel4 11710 2012-04-07 06:25 stunnel.log.1<br>
> root@ns0:/var/log/stunnel4# tail stunnel.log.1<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG7[4745:139677248579328]: Option TCP_NODELAY set on<br>
> remote socket<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG7[4745:139677248579328]: Socket closed on read<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG7[4745:139677248579328]: Sending SSL write shutdown<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG7[4745:139677248579328]: SSL alert (write):<br>
> warning: close notify<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG6[4745:139677248579328]: SSL_shutdown successfully<br>
> sent close_notify<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG7[4745:139677248579328]: SSL socket closed on<br>
> SSL_read<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG7[4745:139677248579328]: Sending socket write<br>
> shutdown<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG5[4745:139677248579328]: Connection closed: 206<br>
> bytes sent to SSL, 139 bytes sent to socket<br>
> <a href="tel:2012.04.06%2022" value="+12012040622">2012.04.06 22</a>:21:19 LOG7[4745:139677248579328]: Service<br>
> <a href="http://https-123monsite.com" target="_blank">https-123monsite.com</a> finished (0 left)<br>
> <a href="tel:2012.04.07%2006" value="+12012040706">2012.04.07 06</a>:25:04 LOG7[4745:139677248583456]: Dispatching signals from<br>
> the signal pipe<br>
> root@ns0:/var/log/stunnel4#<br>
><br>
> compared to my first post... :<br>
><br>
><br>
><br>
><br>
> - <a href="tel:2012.04.04%2006" value="+12012040406">2012.04.04 06</a>:25:04 LOG7[24778:139641780213536]: Dispatching signals<br>
> from the signal pipe<br>
> -<br>
> and at the same time <a href="tel:%282012.04.04%2006" value="+12012040406">(2012.04.04 06</a>:25:04) all logs file stops :<br>
><br>
><br>
> - root@ns0:/var/log/stunnel4# ll<br>
> - total 128<br>
> - drwxr-xr-x 2 stunnel4 stunnel4 4096 2012-04-04 12:10 .<br>
> - drwxr-xr-x 14 root root 4096 2012-04-04 06:25 ..<br>
> - -rw-r----- 1 stunnel4 stunnel4 98084 2012-04-04 *06:25*<br>
> extranet.serviceplus-hse.com_stunnel.log<br>
> - -rw-r----- 1 stunnel4 stunnel4 4491 2012-04-04 06:25<br>
> mansonthomas.com_stunnel.log<br>
> - -rw-r----- 1 stunnel4 stunnel4 0 2012-04-04 06:25 stunnel.log<br>
> - -rw-r----- 1 stunnel4 stunnel4 11058 2012-04-04 06:25 stunnel.log.1<br>
><br>
><br>
><br>
> I could cron a restart at the appropriate time but I think I'll compile<br>
> from sources.<br>
><br>
> Regards,<br>
> Thomas.<br>
><br>
> On Sat, Apr 7, 2012 at 07:51, Thomas Manson <<a href="mailto:dev.mansonthomas@gmail.com">dev.mansonthomas@gmail.com</a>>wrote:<br>
><br>
>> Yes, it helps a lot !<br>
>><br>
>> I've another server running a different version of Ubuntu (11.04 where<br>
>> stunnel version is 4.29-1 instead of 11.10 and stunnel 4.35-2build1)<br>
>><br>
>> Do you think it can work on older version ?<br>
>><br>
>> I was thinking to try this because I've seen some message about the same<br>
>> symptoms after upgrade so...<br>
>><br>
>> but maybe the two version are too close and I will need to compile from<br>
>> sources...<br>
>><br>
>> what do you think about this?<br>
>><br>
>> Regards,<br>
>> Thomas.<br>
>><br>
>><br>
>> On Sat, Apr 7, 2012 at 06:56, Scott Gifford <<a href="mailto:sgifford@suspectclass.com">sgifford@suspectclass.com</a>>wrote:<br>
>><br>
>>> On Wed, Apr 4, 2012 at 6:16 AM, Thomas Manson <<br>
>>> <a href="mailto:dev.mansonthomas@gmail.com">dev.mansonthomas@gmail.com</a>> wrote:<br>
>>><br>
>>>> Hi All,<br>
>>>><br>
>>>> I'm really struggling to make stunnel working for more than a few<br>
>>>> hours. (and the client is yelling hard...) (I solved some other issue :<br>
>>>> logging per website and making more than one stunnel works)<br>
>>>><br>
>>><br>
>>> Hi Thomas,<br>
>>><br>
>>> I was just troubleshooting what looks like a very similar issue. I<br>
>>> believe this is fixed in a later version of stunnel, which you can get from<br>
>>> <a href="http://stunnel.org" target="_blank">stunnel.org</a> and compile yourself from source.<br>
>>><br>
>>> This is the ChangeLog entry that I think addresses your problem:<br>
>>><br>
>>> - Signal pipe set to non-blocking mode. This bug caused hangs of<br>
>>> stunnel<br>
>>> features based on signals, e.g. local mode, FORK threading, or<br>
>>> configuration file reload on Unix. Win32 platform was not affected.<br>
>>><br>
>>><br>
>>> I have just updated from the official Oneiric version to this one, so I<br>
>>> don't yet know if it will fix the problem long-term, but I think my odds<br>
>>> are not too bad.<br>
>>><br>
>>> Hope this helps,<br>
>>><br>
>>> -----Scott.<br>
>>><br>
>>><br>
>><br>
><br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="http://stunnel.mirt.net/pipermail/stunnel-users/attachments/20120407/b5f00aa6/attachment-0001.html" target="_blank">http://stunnel.mirt.net/pipermail/stunnel-users/attachments/20120407/b5f00aa6/attachment-0001.html</a>><br>
<br>
------------------------------<br>
<br>
_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<a href="http://stunnel.mirt.net/mailman/listinfo/stunnel-users" target="_blank">http://stunnel.mirt.net/mailman/listinfo/stunnel-users</a><br>
<br>
<br>
End of stunnel-users Digest, Vol 93, Issue 13<br>
*********************************************<br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div>google+ : <a href="http://gplus.to/malpaso" target="_blank">http://gplus.to/malpaso</a></div><br>