Dear Users,
I have released version 5.54 of stunnel.
Version 5.54, 2019.05.15, urgency: LOW
* New features
- New "ticketKeySecret" and "ticketMacSecret" options
to control confidentiality and integrity protection
of the issued session tickets. These options allow
for session resumption on other nodes in a cluster.
- Added logging the list of active connections on
SIGUSR2 or with Windows GUI.
- Logging of the assigned bind address instead of the
requested bind address.
* Bugfixes
- Service threads are terminated before OpenSSL cleanup
to prevent occasional stunnel crashes at shutdown.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
5e8588a6c274b46b1d63e1b50f0725f4908dec736f6588eb48d1eb3d20c87902
stunnel-5.54.tar.gz
ed8424731f7d6e0c9b11f4c7b597a072e558dae7979102d0b213759678079481
stunnel-5.54-win64-installer.exe
7659f605065e5155577a99abe1129dbc89523796196c8bf50d3fa9265ec34d93
stunnel-5.54-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.53 of stunnel.
Version 5.53, 2019.04.10, urgency: HIGH
* Bugfixes
- Fixed data transfer stalls introduced in stunnel 5.51.
* New features
- Android binary updated to support Android 4.x.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
80439896ee14269eb70bc8bc669433c7d619018a62c9f9c5c760a24515302585
stunnel-5.53.tar.gz
4f2d24d08f547943b8a499d411425409a52973a349c9120c650ba77d3f29ef79
stunnel-5.53-win64-installer.exe
e619880f4fc25a7a4869cace9f6e6f3f5940cfdb764ed9987d892d9e9b0ea35d
stunnel-5.53-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.52 of stunnel.
Version 5.52, 2019.04.08, urgency: HIGH
* Bugfixes
- Fixed a transfer() loop bug introduced in stunnel 5.51.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
00b973aa0d48b0707dd722c4e0a20b8378fc9b0ba301fdb785ffb75341024e21
stunnel-5.52.tar.gz
c9224c35cdd3a6de8fab7c2844ca0c185ebcc96fd9183a05407e2ba77cadc7c6
stunnel-5.52-win64-installer.exe
d4ff581e1547c2e194abd586e9542bfe20399c1287f970eaa5ba1824e4567453
stunnel-5.52-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.51 of stunnel.
Version 5.51, 2019.04.04, urgency: MEDIUM
* New features
- Hexadecimal PSK keys are automatically converted to binary.
- Session ticket support (requires OpenSSL 1.1.1 or later).
"connect" address persistence is currently unsupported
with session tickets.
- SMTP HELO before authentication (thx to Jacopo Giudici).
- New "curves" option to control the list of elliptic
curves in OpenSSL 1.1.0 and later.
- New "ciphersuites" option to control the list of
permitted TLS 1.3 ciphersuites.
- Include file name and line number in OpenSSL errors.
- Compatibility with the current OpenSSL 3.0.0-dev branch.
- Better performance with SSL_set_read_ahead()/SSL_pending().
* Bugfixes
- Fixed PSKsecrets as a global option (thx to Teodor Robas).
- Fixed a memory allocation bug (thx to matanfih).
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
77437cdd1aef1a621824bb3607e966534642fe90c69f4d2279a9da9fa36c3253
stunnel-5.51.tar.gz
a0e26fde3ba09d6545cfbb44cab06ebd4ddf9c4b536e7d8eb76615ab54b2339c
stunnel-5.51-win64-installer.exe
ee90bef40cb47617fe7372707dba119f5176cb0fd9eb1bc00cdd1e2c370041db
stunnel-5.51-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.50 of stunnel.
Version 5.50, 2018.12.02, urgency: MEDIUM
* New features
- 32-bit Windows builds replaced with 64-bit builds.
- OpenSSL DLLs updated to version 1.1.1.
- Check whether "output" is not a relative file name.
- Major code cleanup in the configuration file parser.
- Added sslVersion, sslVersionMin and sslVersionMax
for OpenSSL 1.1.0 and later.
* Bugfixes
- Fixed PSK session resumption with TLS 1.3.
- Fixed a memory leak in WIN32 logging subsystem.
- Allow for zero value (ignored) TLS options.
- Partially refactored configuration file parsing
and logging subsystems for clearer code and minor
bugfixes.
* Caveats
- We removed FIPS support from our standard builds.
FIPS will still be available with bespoke builds.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
951d92502908b852a297bd9308568f7c36598670b84286d3e05d4a3a550c0149
stunnel-5.50.tar.gz
e855d58a05dca0943a5da8d030b5904630ee9cff47c3d747d326e151724f3bc8
stunnel-5.50-win64-installer.exe
ad6c952cd26951c5a986efe8034b71af07c951e11d06e0b0ce73ef82594b1041
stunnel-5.50-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.49 of stunnel.
Version 5.49, 2018.09.03, urgency: MEDIUM
* New features
- Performance optimizations.
- Logging of negotiated or resumed TLS session IDs (thx
to ANSSI - National Cybersecurity Agency of France).
- Merged Debian 10-enabled.patch and 11-killproc.patch
(thx to Peter Pentchev).
- OpenSSL DLLs updated to version 1.0.2p.
- PKCS#11 engine DLL updated to version 0.4.9.
* Bugfixes
- Fixed a crash in the session persistence implementation.
- Fixed syslog identifier after configuration file reload.
- Fixed non-interactive "make check" invocations.
- Fixed reloading syslog configuration.
- stunnel.pem created with SHA-256 instead of SHA-1.
- SHA-256 "make check" certificates.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
3d6641213a82175c19f23fde1c3d1c841738385289eb7ca1554f4a58b96d955e
stunnel-5.49.tar.gz
459bbb212baf0b9821c80e0664c830246ef6e97c7329fb08160e87ff11ae9692
stunnel-5.49-win32-installer.exe
72416c6664106ad815a8da67a525c6593247fc06cbca3b8918ffc87ae92595e8
stunnel-5.49-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.48 of stunnel.
Version 5.48, 2018.07.02, urgency: HIGH
* Security bugfixes
- Fixed requesting client certificate when specified
as a global option.
* New features
- Certificate subject checks modified to accept certificates
if at least one of the specified checks matches.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
1011d5a302ce6a227882d094282993a3187250f42f8a801dcc1620da63b2b8df
stunnel-5.48.tar.gz
eb160fdf28061eb509e09824ab9cd26f4f0ca9be3b90008bba32274d5136c7eb
stunnel-5.48-win32-installer.exe
667ee8c8d5440117285eb5a5ddf0d305a6dd1dbb93dcf5b7bac62f84ddba7466
stunnel-5.48-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.47 of stunnel.
Version 5.47, 2018.06.23, urgency: HIGH
* New features
- Fast add_lock_callback for OpenSSL < 1.1.0.
This largely improves performance on heavy load.
- Automatic detection of Homebrew OpenSSL.
- Clarified port binding error logs.
- Various "make test" improvements.
* Bugfixes
- Fixed a crash on switching to SNI slave sections.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
c4e675db996eb92beef885f72a3ed8af3c7603fea6b99d2873198dd6c0021d0b
stunnel-5.47.tar.gz
985e1d65a3f4a7599cc78630960e1b2c97981f91ce6bc41f2eefcd371b4067a3
stunnel-5.47-win32-installer.exe
309cfb79329448f0c134aece0d10d0737e3728b25c288e9a76650837cd6f839c
stunnel-5.47-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.46 of stunnel.
Version 5.46, 2018.05.28, urgency: MEDIUM
* New features
- The default cipher list was updated to a safer value:
"HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK".
* Bugfixes
- Default accept address restored to INADDR_ANY.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
76aab48c28743d78e4b2f6b2dfe49994b6ca74126046c179444f699fae7a84c7
stunnel-5.46.tar.gz
721cc4d7c385743df767a32a53c11477def2440ae20ad4538d8e685f7b7d6538
stunnel-5.46-win32-installer.exe
d08a3b3598868064db08d6f0e3a97e3c49dedbf6c8d7f348a613b832eca16dd6
stunnel-5.46-android.zip
Best regards,
Mike
Dear Users,
I have released version 5.45 of stunnel.
Version 5.45, 2018.05.21, urgency: MEDIUM
* New feature sponsored by https://loadbalancer.org/
- Implemented delayed deallocation of service sections
after configuration file reload.
* Other new features
- OpenSSL DLLs updated to version 1.0.2o.
- Deprecated the sslVersion option.
- The "socket" option is now also available in service sections.
- Implemented try-restart in the SysV init script (thx to
Peter Pentchev).
- TLS 1.3 compliant session handling for OpenSSL 1.1.1.
- Default "failover" value changed from "rr" to "prio".
- New "make check" tests.
* Bugfixes
- A service no longer refuses to start if binding fails for
some (but not all) addresses:ports.
- Fixed compression handling with OpenSSL 1.1.0 and later.
- _beginthread() replaced with safer _beginthreadex().
- Fixed exception handling in libwrap.
- Fixed exec+connect services.
- Fixed automatic resolver delaying.
- Fixed a Gentoo cross-compilation bug (thx to Joe Harvell).
- A number of "make check" framework fixes.
- Fixed false postive memory leak logs.
- Build fixes for OpenSSL versions down to 0.9.7.
- Fixed (again) round-robin failover in the FORK threading model.
Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html
SHA-256 hashes:
548244839b8a4bf4dffea46c97893b203d1b9eed118c3dd6a9ac4d8d02592ee3
stunnel-5.45.tar.gz
fc13a224c7ec1290035efe8317c53d62a0980a5ab2efe8930b06aae269fbe873
stunnel-5.45-win32-installer.exe
29025eaed007c62856f16c7a8a22f9713eee9762ed95009f6f91f729c35c0bc0
stunnel-5.45-android.zip
Best regards,
Mike
