<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>The 50% could be because the server side is not fully updated – we have this problem a lot with very large companies that should know better (and in reality should overlap instead of changing over – meaning allow SSLv3 for 3 months or something while also accepting TLSv2.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>A very good way to test is to get a telnet program. Then “telnent localhost port#” – the port # being the port number stunnel is running on. This will remove all variables except stunnel and allow you to see the output. It could be you are connecting fine and failing some other authentication like a login – which you can see often with telnet. And set your firewall to not allow telnet on port 23. Also, we have found stunnel MUCH more reliable under inetd (if you are on Unix of course) than as a stand-alone server. A little performance loss that is unnoticeable to us – big customers exchange 2-4 million XML documents a day (using stunnel) so inetd is definitely not the most efficient way, but the machines are so darn fast it seems not to matter.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>The certificates have become more painful but I have never had to use an official signed one. I make my own with openssl. However, there are intermediate ones that are needed from whomever you connect to if they have a signed certificate – say from Verisign – you may need your certificate and Verisigns, etc – in a chain. <o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I use “cacert” to set to a large file of .pem certificates – which I simply download from the Web (available all over, some work, some don’t. When you get one that works … then use it. You can modify them by adding anything not found in the file. Supposedly the cacert file I have now is good till 2020 for the big names.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>You can also use openssl to get the certificate from the server – just ask and you shall receive. It should have the entire chain.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>I used to have on massive cacert for everyone and it was getting out of hand. As tacky as it is, I just make a cacert.pem file for every connection (e.g. Walmart, Fedex, Target, whatever). This allows working connections to keep working while you fiddle with a tricky one.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Eric<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in'><p class=MsoNormal style='border:none;padding:0in'><span style='color:#1F497D'><o:p> </o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'>Eric S Eberhard<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>VICS (Vertical Integrated Computer Systems)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Voice: 928 567 3529<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Cell : 928 301 7537 (not reliable except for text or if not home)<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>2933 W Middle Verde Rd<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Camp Verde, AZ 86322<o:p></o:p></span></p></div><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> stunnel-users [mailto:stunnel-users-bounces@stunnel.org] <b>On Behalf Of </b>Ian Bamforth<br><b>Sent:</b> Wednesday, July 04, 2018 9:00 AM<br><b>To:</b> stunnel-users@stunnel.org<br><b>Subject:</b> [stunnel-users] Intermittent error in 042_inetd<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-GB>Afternoon,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB>Until recently we’d disabled `make test` because of certificate problems – we’ve re-enabled it (using `make check`) but are getting intermittent failures (around 50% of CI runs). Below is the output from the logs – I can’t see what’s gone wrong, can anyone shed any light?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Clients allowed=14648<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: errno: (*__errno_location ())<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Compression disabled<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: No PRNG seeding was required<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Ciphers: HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: TLS options: 0x02004004 (+0x00004000, -0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Private key check succeeded<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: ECDH initialization<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: ECDH initialized with curve prime256v1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Binding service [server]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Listening file descriptor created (FD=6)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Setting accept socket options (FD=6)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Option SO_REUSEADDR set on accept socket<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Created pid file /opt/stunnel/stunnel-5.48/tests/logs/stunnel.pid<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[cron]: Cron thread initialized<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Found 1 ready file descriptor(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: FD=4 events=0x2001 revents=0x0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: FD=6 events=0x2001 revents=0x1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Service [server] accepted (FD=3) from 127.0.0.1:58890<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Service [server] started<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Setting local socket options (FD=3)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Option TCP_NODELAY set on local socket<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): before SSL initialization<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): before SSL initialization<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: SNI: no virtual services defined<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read client hello<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write server hello<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write certificate<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write key exchange<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write server done<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write server done<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read client key exchange<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read change cipher spec<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read finished<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write change cipher spec<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write finished<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: New session callback<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 1 server accept(s) requested<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 1 server accept(s) succeeded<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 server renegotiation(s) requested<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 session reuse(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 1 internal session cache item(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 internal session cache fill-up(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 internal session cache miss(es)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 external session cache hit(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 expired session(s) retrieved<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Compression: null, expansion: null<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Setting remote socket options (FD=10)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Option TCP_NODELAY set on remote socket<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=10) initialized<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS alert (read): warning: close notify<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Sent socket write shutdown<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=10) closed<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Local descriptor (FD=3) closed<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Service [server] finished (0 left)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Found 1 ready file descriptor(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: FD=4 events=0x2001 revents=0x1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: FD=6 events=0x2001 revents=0x0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Dispatching a signal from the signal pipe<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Processing SIGCHLD<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Retrieving pid statuses with waitpid()<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Clients allowed=14648<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: errno: (*__errno_location ())<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Compression disabled<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: No PRNG seeding was required<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: Ciphers: HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: TLS options: 0x02000004 (+0x00000000, -0x00000000)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[ui]: No certificate or private key specified<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Service [inetd client] started<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: s_connect: s_poll_wait 127.0.0.1:4433: waiting 10 seconds<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Setting remote socket options (FD=3)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Option TCP_NODELAY set on remote socket<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=3) initialized<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): before SSL initialization<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write client hello<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write client hello<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server hello<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server certificate<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server key exchange<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server done<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write client key exchange<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write change cipher spec<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write finished<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write finished<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read change cipher spec<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read finished<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: New session callback<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Peer certificate was cached (1241 bytes)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 1 client connect(s) requested<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 1 client connect(s) succeeded<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 client renegotiation(s) requested<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: 0 session reuse(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Compression: null, expansion: null<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Sending close_notify alert<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: TLS alert (write): warning: close notify<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=3) closed<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Service [inetd client] finished (0 left)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[0]: Deallocating section defaults<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Found 1 ready file descriptor(s)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: FD=4 events=0x2001 revents=0x1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: FD=6 events=0x2001 revents=0x0<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Dispatching a signal from the signal pipe<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Processing SIGNAL_TERMINATE<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Leak detection table utilization: 86/997, 8.63%<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Removed pid file /opt/stunnel/stunnel-5.48/tests/logs/stunnel.pid<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB style='font-size:8.0pt;font-family:"Courier New"'>2018.07.04 09:59:36 LOG7[main]: Deallocating section defaults<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 width="100%" style='width:100.0%;border-collapse:collapse'><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal style='margin-bottom:12.0pt'><span style='color:#141B4D;mso-fareast-language:EN-GB'>Regards,</span><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'><o:p></o:p></span></p></td></tr><tr><td nowrap valign=top style='padding:0in 0in 0in 0in'><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td width="60%" nowrap valign=top style='width:60.0%;padding:0in 0in 0in 0in'><p class=MsoNormal><b><span style='font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'>Ian Bamforth</span></b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'> <br>Senior Software Engineer <br>Operations & Planning Systems Division<br></span><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'><br>T: </span></b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'> <a href="tel:00441133443970"><span style='color:gray;text-decoration:none'>+44 (0)113 344 3970</span></a> </span><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'><br>M: </span></b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'><a href="tel:00447852404240"><span style='color:gray;text-decoration:none'>+44 (0)7852 404240</span></a> </span><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'><br>E: </span></b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'> <a href="mailto:Ian.Bamforth@tracsis.com"><span style='color:gray;text-decoration:none'>Ian.Bamforth@tracsis.com</span></a> </span><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'><br>W:</span></b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'> <a href="https://www.tracsis.com"><span style='color:gray;text-decoration:none'>www.tracsis.com</span></a> </span><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'><br></span></b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'><a href="http://www.tracsisops.com"><span style='color:gray;text-decoration:none'>www.tracsisops.com</span></a> <o:p></o:p></span></p></td><td nowrap valign=top style='padding:0in 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'>Follow Us<br></span></b><a href="https://www.linkedin.com/company/972873?trk=tyah&trkInfo=idx:1-1-1,tarId:1420795682492,tas:tracsis"><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB;text-decoration:none'><img border=0 width=15 height=15 id="_x0000_i1025" src="https://static.tracsis.com/email/lin2.png" alt="https://static.tracsis.com/email/lin2.png"></span></b></a><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'> </span><a href="https://www.twitter.com/tracsis"><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB;text-decoration:none'><img border=0 width=15 height=15 id="_x0000_i1026" src="https://static.tracsis.com/email/twi2.png" alt="https://static.tracsis.com/email/twi2.png"></span></a><b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D;mso-fareast-language:EN-GB'><br><br>Tracsis plc</span></b><span style='font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'> <br>Leeds Innovation Centre <br>103 Clarendon Road <br>Leeds <br>LS2 9DF <o:p></o:p></span></p></td></tr><tr><td width=601 nowrap colspan=2 valign=top style='width:6.25in;padding:0in 0in 0in 0in'><p class=MsoNormal style='text-align:justify;line-height:90%;vertical-align:top'><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="Picture_x0020_2" o:spid="_x0000_s1026" type="#_x0000_t75" alt="https://static.tracsis.com/email/award4.png" style='position:absolute;left:0;text-align:left;margin-left:340.1pt;margin-top:0;width:221.25pt;height:81pt;z-index:251659264;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:6.65pt;mso-wrap-distance-top:3.35pt;mso-wrap-distance-right:6.65pt;mso-wrap-distance-bottom:3.35pt;mso-position-horizontal:right;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:line;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page' o:allowoverlap="f">
<v:imagedata src="https://static.tracsis.com/email/award4.png" />
<w:wrap type="square"/>
</v:shape><![endif]--><![if !vml]><img width=295 height=108 src="https://static.tracsis.com/email/award4.png" align=right hspace=9 vspace=4 alt="https://static.tracsis.com/email/award4.png" v:shapes="Picture_x0020_2"><![endif]><span style='font-size:7.0pt;line-height:90%;font-family:"Arial",sans-serif;color:gray;mso-fareast-language:EN-GB'><br>Tracsis Operations and Planning Systems Division is a Division of Tracsis plc and comprises Tracsis plc (05019106), Tracsis Rail Consultancy Limited (05047148), Safety Information Systems Limited trading as COMPASS (02588404) and Tracsis Retail and Operations Limited (04225250), all subsidiaries of Tracsis plc with a registered office at Leeds Innovation Centre,103 Clarendon Road, Leeds, LS2 9DF. VAT Registration No: 945 7876 61. This email and its attachments may be confidential and are intended solely for the use of the individual(s) to whom it is addressed. If you are not the intended recipient of this email and its attachments, you must take no action based upon them, nor must you copy or show them to anyone. Please contact the sender if you believe you have received this email in error.<o:p></o:p></span></p></td></tr></table></td></tr></table><p class=MsoNormal><span lang=EN-GB><o:p> </o:p></span></p></div></body></html>