<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 16 Sep 2016, at 06:41, Małgorzata Olszówka <<a href="mailto:gosia@olszowka.net" class="">gosia@olszowka.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class=""><blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="">My stunnel-sender.conf:<br class="">"""""""""""""""""""<br class="">debug = 7<br class="">output = /Users/dave/Desktop/stunnel-test/sender-stunnel-output.log<br class="">foreground = yes<br class="">client = yes<br class="">connect = localhost:874<br class="">cert = /Users/dave/Desktop/stunnel-test/cert.pem<br class="">verify = 0<br class="">"""""""""""""""""""<br class=""><br class="">My stunnel-receiver.conf:<br class="">"""""""""""""""""""<br class="">debug = 7<br class="">output = /Users/dave/Desktop/stunnel-test/receiver-stunnels-output.log<br class="">pid = /Users/dave/Desktop/stunnel-test/stunnel-rsyncd-stunnels.pid<br class="">cert = /Users/dave/Desktop/stunnel-test/cert.pem<br class="">verify = 0<br class="">delay = yes<br class="">exec = /Users/dave/Desktop/stunnel-test/rsync<br class="">execArgs = -vvvv --daemon --server --config=/Users/dave/Desktop/stunnel-test/stunnel-rsyncd.conf .<br class="">foreground = yes<br class="">client = no<br class="">"""""""""""""""""""<br class=""></blockquote><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Hi,</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">I think you should pay attention to the execArgs option, turn off the foreground mode and connect the client to the server (not localhost).</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Regards.</span></div></div></blockquote><br class=""></div><div>Hello,</div><br class=""><div class=""><blockquote type="cite" class=""><span class="" style="display: inline !important;">pay attention to the execArgs option</span></blockquote>What about the execArgs do you think is wrong? If it’s the trailing dot then it’s something to do with rsync (<a href="https://lists.samba.org/archive/rsync-cvs/2013-July/007296.html" class="">detailed here</a>).</div><div class="">As far as I can tell, Stunnel doesn’t even get as far as invoking the executable because it never manages to finish connecting.</div><div class=""><br class=""></div><div class=""><blockquote type="cite" class=""><span class="" style="display: inline !important;">and connect the client to the server (not localhost).</span></blockquote>The server *is* on localhost. So is the client. The logs show the server is on port 874 and the client connected from port 51362 on this occasion.</div><div class=""><br class=""></div><div class="">Further information: I’ve also tried Stunnel 4.57 and this fails in exactly the same way.</div><div class=""><br class=""></div><div class="">It also bothers me that the last log line mentions SSLv3 (server) and SSLv2/v3 (client)… but the manual says "Obsolete SSLv2 and SSLv3 are currently disabled by default”. So why would they appear in the log? I’ve even explicitly disabled them with addition of "options = NO_SSLv2" and "options = NO_SSLv3” lines in the confs, but this makes no difference.</div><div class=""><br class=""></div><div class="">— Dave.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div></body></html>