<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hi<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Can you help in sorting it out below scenario<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">We have a URL whose TLS is 1.0 and now it is being upgraded to 1.2. Since the current application doesn’t support V1.0 I am planning to use stunnel in between to fix the gap. Can you help if my below config is
correct or not. The communication between client and server is MASSL(mutual authentication SSL)<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Courier New"">[Billpay46200]
<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Courier New"">client = yes<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Courier New"">CApath = /apps/bss/CCBTrustStore</span><span style="font-size:9.0pt;font-family:Wingdings">à</span><span style="font-size:9.0pt;font-family:"Courier New"">trust
store where the remote webservice certificates are stored in cert format<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Courier New"">accept = 46200</span><span style="font-size:9.0pt;font-family:Wingdings">à</span><span style="font-size:9.0pt;font-family:"Courier New"">port configured
from client machine to connect using http<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Courier New"">connect = xxx.in.xxx.com.au:46200</span><span style="font-size:9.0pt;font-family:Wingdings">à</span><span style="font-size:9.0pt;font-family:"Courier New"">port
where the incoming http request need to be changed from http to https<o:p></o:p></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:9.0pt;font-family:"Courier New"">cert = /stunnel/bin/client.pem</span><span style="font-size:9.0pt;font-family:Wingdings">à</span><span style="font-size:9.0pt;font-family:"Courier New"">identity
certificate used for client<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New"">key = /stunnel/bin/key.pem</span><span style="font-size:9.0pt;font-family:Wingdings">à</span><span style="font-size:9.0pt;font-family:"Courier New"">corresponding key for the above
identity certificate.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Courier New"">While hitting using the URL
<a href="http://localhost:46200">http://localhost:46200</a> it is shown in stunnel log as below<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2017.04.28 17:17:51 LOG5[2627:3]: Billpay46200 accepted connection from 127.0.0.1:58382<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2017.04.28 17:17:51 LOG5[2627:3]: Billpay46200 connected remote server from 10.116.194.24:58383<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2017.04.28 17:17:51 LOG3[2627:3]: SSL_connect: Peer suddenly disconnected<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">2017.04.28 17:17:51 LOG5[2627:3]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Thanks and Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Jothish
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">TIBCO TSD<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Ph. : +91 44 39263958<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Mobile : +91 9884040171<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1F497D">Support : +91 9962007110</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">OC : jothish.chokkalingam</span><span style="font-size:9.0pt;color:#17365D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#17365D">Group mail:- Telstra.psm.tsd.tibco@accenture.com<o:p></o:p></span></p>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by
you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of
internal compliance with Accenture policy. <br>
______________________________________________________________________________________<br>
<br>
www.accenture.com<br>
</font>
</body>
</html>