- stunnel-users - stunnel.org

stunnel.cfg file
by Dheeraj Sehrawat 28 Jun '06

28 Jun '06

Hi All, I am looking at a problem and found the system is using stunnel with web server. From my google search I have understood that stunnel is used to make the application SSL enable. Please validate my understanding. I found following stunnel.cfg file in properties directory Port0 Enabled=0 ExternalPort=0 LocalPort=0 SSLEnabled=0 UDP=0 Port1 Enabled=1 ExternalPort=1500 LocalPort=10080 SSLEnabled=0 Port2 Enabled=0 ExternalPort=1600 LocalPort=10080 SSLEnabled=1 ------------------------------------------------------ I have the following questions: 1] what is the meaning of ExternalPort and LocalPort ? How does these ports relate with each other? Please help me in understanding this configuration file. Thanks, Dheeraj __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Re: enabling zlib compression
by ahall＠madasafish.com 27 Jun '06

27 Jun '06

I'd really like to get this working, but I'm not sure what other information you require? All other posts on this subject refer to making sure zlib is included when openssl is compiled. Well, I've confirmed that it is. Would a strace of stunnel attempting to start up help? FYI - The output of stunnel -version displays... stunnel 4.15 on i686-pc-linux-gnu with OpenSSL 0.9.7a Feb 19 2003 Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv4 Auth:LIBWRAP Could someone please provide me with some suggestions. Thanks very much. On Mon, 26 Jun 2006 13:09:36 , <ahall(a)madasafish.com> sent: >OK - after checking the OpenSSL src-rpm I can confirm that zlib is compiled... > >./Configure \ > --prefix=%{_prefix} --openssldir=%{_datadir}/ssl ${sslflags} \ > zlib no-idea no-mdc2 no-rc5 no-ec shared \ > --with-krb5-flavor=MIT \ > -I%{_prefix}/kerberos/include -L%{_prefix}/kerberos/%{_lib} \ > ${sslarch} > >Any ideas why the "compression=zlib" option still produces the "Failed to add >zlib compression method" error? > >Thanks very much. > > >>On Fri, 23 Jun 2006 17:01:24 , ahall(a)madasafish.com> sent: >> >>>Hi there, >>> >>>When I try to enable zlib compression at the server I get this error when >>>starting it up... >>> >>>2006.06.23 15:44:39 LOG3[3426:3086293504]: Failed to add zlib compression method >>> >>>How do I get zlib to work? Do I need to compile OpenSSL with zlib? >>> >>>I'm using Fedora Core 3 with stunnel-4.15, and OpenSSL and zlib are from RPM's. >>> >>>Thanks very much. > >---- - Madasafish - Voted Best Heavy Consumer Broadband Provider in the 2006 Internet Industry Awards http://www.madasafish.com/ ---- - Madasafish - Voted Best Heavy Consumer Broadband Provider in the 2006 Internet Industry Awards http://www.madasafish.com/

1 0

Patch to fix compile errors under MS Visual C++ 2005
by David Gillingham 26 Jun '06

26 Jun '06

Attached is a patch for stunnel 4.15 that allows the source to be built under Microsoft Visual Studio 2005. Here's a rundown of what's been changed: In common.h, I included io.h and fcntl.h so that pty.c would build without error. In env.c, I included the winsock headers (replicating how it was done for common.h), and removed a duplicate include of sys/socket.h. The latter change wasn't necessary for compiliation with MSVC, but I thought I'd remove what looked like an unncessary line. To get stunnel to build without warning, I defined the following preprocessor definitions: USE_WIN32 _CRT_SECURE_NO_DEPRECATE _CRT_NONSTDC_NO_DEPRECATE HAVE_GETADDRINFO HAVE_GETNAMEINFO _MBCS Later in the week, I'll post a patch to vs.mak to automate the build process (I'm still building with a solution file at the moment). To the stunnel developers: If there's anything extra I can do to ensure these changes are incorporated into the next release, please let me know.

1 0

Re: enabling zlib compression
by ahall＠madasafish.com 26 Jun '06

26 Jun '06

OK - after checking the OpenSSL src-rpm I can confirm that zlib is compiled... ./Configure \ --prefix=%{_prefix} --openssldir=%{_datadir}/ssl ${sslflags} \ zlib no-idea no-mdc2 no-rc5 no-ec shared \ --with-krb5-flavor=MIT \ -I%{_prefix}/kerberos/include -L%{_prefix}/kerberos/%{_lib} \ ${sslarch} Any ideas why the "compression=zlib" option still produces the "Failed to add zlib compression method" error? Thanks very much. >On Fri, 23 Jun 2006 17:01:24 , ahall(a)madasafish.com> sent: > >>Hi there, >> >>When I try to enable zlib compression at the server I get this error when >>starting it up... >> >>2006.06.23 15:44:39 LOG3[3426:3086293504]: Failed to add zlib compression method >> >>How do I get zlib to work? Do I need to compile OpenSSL with zlib? >> >>I'm using Fedora Core 3 with stunnel-4.15, and OpenSSL and zlib are from RPM's. >> >>Thanks very much. ---- - Madasafish - Voted Best Heavy Consumer Broadband Provider in the 2006 Internet Industry Awards http://www.madasafish.com/

1 0

Re: enabling zlib compression
by ahall＠madasafish.com 26 Jun '06

26 Jun '06

I have checked the OpenSSL INSTALL file and zlib /should/ be enabled by default... zlib-dynamic Like "zlib", but has OpenSSL load the zlib library dynamically when needed. This is only supported on systems where loading of shared libraries is supported. This is the default choice. If I can assume that Linux supports the loading of shared libraries, then can someone please help me to get zlib compression working over the stunnel. Thanks very much. On Fri, 23 Jun 2006 17:01:24 , <ahall(a)madasafish.com> sent: >Hi there, > >When I try to enable zlib compression at the server I get this error when >starting it up... > >2006.06.23 15:44:39 LOG3[3426:3086293504]: Failed to add zlib compression method > >How do I get zlib to work? Do I need to compile OpenSSL with zlib? > >I'm using Fedora Core 3 with stunnel-4.15, and OpenSSL and zlib are from RPM's. > >Thanks very much. > >---- - Madasafish - Voted Best Heavy Consumer Broadband Provider in the 2006 Internet Industry Awards http://www.madasafish.com/ ---- - Madasafish - Voted Best Heavy Consumer Broadband Provider in the 2006 Internet Industry Awards http://www.madasafish.com/

1 0

Solaris9/Sparc runtime library problems
by Dave Hinz 23 Jun '06

23 Jun '06

This is probably a very basic problem, but I've checked the FAQ and googled through the mailing list's archives and I'm not seeing what appears to be a match for this problem. I'm completely new to stunnel. It built and runs just fine on one of my linux dev boxes, but on Solaris, I can't get it to run. Attempting to run /usr/local/sbin/stunnel, I get the following: ---begin output--- jabba% ./stunnel ld.so.1: ./stunnel: fatal: libssl.so.0.9.7: open failed: No such file or directory Killed ---end output--- The various debug switches to stunnel give the same output - it's dying before anything can be started, apparently. libssl.so.0.9.7 is located on that box at /usr/local/ssl/lib/libssl.so.0.9.7and other ssl functions of the system appear to work normally. I suspect that stunnel just doesn't know how to find it, but I'm at a loss as to how to tell it where to look. Can someone suggest my next steps please? Thank you, Dave Hinz

2 1

Patch for stunnel 4.15 to support pgsql protocol
by Peter Kuma 23 Jun '06

23 Jun '06

Hi I've written a short patch for stunnel 4.15 adding support for PostgreSQL SSL negotiation. I hope it'll be useful. http://vcielka.rec.uniba.sk/~peter/stunnel-pgsql.patch PostgreSQL documentation explaining how to establish SSL connection: http://www.postgresql.org/docs/8.1/interactive/protocol-flow.html#AEN60652 http://www.postgresql.org/docs/8.1/interactive/protocol-message-formats.html Regards Peter Kuma

1 0

enabling zlib compression
by ahall＠madasafish.com 23 Jun '06

23 Jun '06

Hi there, When I try to enable zlib compression at the server I get this error when starting it up... 2006.06.23 15:44:39 LOG3[3426:3086293504]: Failed to add zlib compression method How do I get zlib to work? Do I need to compile OpenSSL with zlib? I'm using Fedora Core 3 with stunnel-4.15, and OpenSSL and zlib are from RPM's. Thanks very much. ---- - Madasafish - Voted Best Heavy Consumer Broadband Provider in the 2006 Internet Industry Awards http://www.madasafish.com/

1 0

Re: CRLPath not working (Michal Trojnara)
by Nagasundaram, Sekhar 15 Jun '06

15 Jun '06

Michael: We will give this also a shot. The workaround worked however. Much thanks Sekhar ---------------- Message: 4 Date: Tue, 13 Jun 2006 23:44:50 +0200 From: Michal Trojnara <Michal.Trojnara(a)mobi-com.net> Subject: Re: [stunnel-users] CRLPath not working To: stunnel-users(a)mirt.net Message-ID: <200606132344.53413.Michal.Trojnara(a)mobi-com.net> Content-Type: text/plain; charset="utf-8" On Tuesday 13 June 2006 02:14, Nagasundaram, Sekhar wrote: > Here are the configuration and the log files as you requested.... Thank you. Please try the following change: --- ctx.old 2006-06-13 23:33:29.000000000 +0200 +++ ctx.c 2006-06-13 23:35:33.000000000 +0200 @@ -460,6 +460,7 @@ s_log(LOG_DEBUG, "Loaded CRLs from %s", section->crl_file); } if(section->crl_dir) { + section->revocation_store->cache=0; lookup=X509_STORE_add_lookup(section->revocation_store, X509_LOOKUP_hash_dir()); if(!lookup) { BTW: Did my workaround work? Best regards, Mike

1 0

RE: [stunnel-users] Is there a limit to the number of services youcanhave defined on a client?
by Lund, Claus 14 Jun '06

14 Jun '06

Well, we need about 100+ in our current environment. So how about increasing it to maybe 256? -Claus -----Original Message----- From: stunnel-users-bounces(a)mirt.net [mailto:[email protected]] On Behalf Of Michal Trojnara Sent: Wednesday, June 14, 2006 4:23 PM To: <stunnel-users(a)mirt.net> <stunnel-users(a)mirt.net> Subject: Re: [stunnel-users] Is there a limit to the number of services youcanhave defined on a client? On 2006-06-14, at 22:18, Lund, Claus wrote: > Any chance the default could be increased? Really, what's 4MB of RAM > between friends (for the example in your answer)? :-) Okay. What value do you recommend? > And maybe implement an error/warning message when the limit is > exceeded? Good idea. I'll do it. Best regards, Mike _______________________________________________ stunnel-users mailing list stunnel-users(a)mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users

1 0