-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi!
Since I want to write CRL files from all relevant CAs based on a regular
(daily) basis I wonder whether it is necessary to restart stunnel if the
contents of the CRL or CA directory changes.
The regular part is going to be handled by a cronjob which does an LDAP search
which results in the CA certificate and crl files.
How does stunnel work in this situation? Do I need a restart after a cron run
or not?
Thanks in advance!
- --
Heiko Nardmann (Dipl.-Ing. Technische Informatik)
secunet Security Networks AG - Sicherheit in Netzwerken (www.secunet.de),
Weidenauer Str. 223-225, D-57076 Siegen
Tel. : +49 271 48950-13, Fax : +49 271 48950-50
Besuchen Sie uns vom 10. - 16. März auf der CeBIT 2005 in Halle 7, Stand D38.
Informationen zu unseren CeBIT-Themen finden Sie unter www.secunet.com
<outbind://44/www.secunet.com> - wir freuen uns auf das Gespräch mit Ihnen.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
iD8DBQFB/j+kpm53PRScYygRArxfAJ4mXXvjL+qEh6lBJlhpJJfC/jSoEQCgx4ie
Xjv5/K3xcL6qPxp5ZH3SzOk=
=4/pC
-----END PGP SIGNATURE-----
2
1
Hi Michal,
The initial lines look like this:-
2005.01.25 15:21:23 LOG5[1160:2612]: stunnel 4.07 on x86-pc-mingw32-gnu
WIN32+IPv4 with OpenSSL 0.9.7e 25 Oct 2004
2005.01.25 15:21:24 LOG5[1160:1828]: No limit detected for the number of
clients
2005.01.25 15:21:24 LOG5[1160:1476]: HTTP connected from 10.3.5.137:2013
2005.01.25 15:21:25 LOG3[1160:1476]: readsocket: Connection reset by peer
(WSAECONNRESET) (10054)
2005.01.25 15:21:25 LOG5[1160:1476]: Connection reset: 206 bytes sent to
SSL, 250 bytes sent to socket
2005.01.25 15:21:25 LOG5[1160:2380]: HTTP connected from 10.3.5.137:2024
2005.01.25 15:21:25 LOG3[1160:2380]: readsocket: Connection reset by peer
(WSAECONNRESET) (10054)
2005.01.25 15:21:25 LOG5[1160:2380]: Connection reset: 206 bytes sent to
SSL, 226 bytes sent to socket
2005.01.25 15:21:25 LOG5[1160:1992]: HTTP connected from 10.3.5.137:2056
2005.01.25 15:21:27 LOG5[1160:2220]: HTTP connected from 10.3.5.137:2084
2005.01.25 15:21:31 LOG5[1160:2220]: Connection closed: 4969 bytes sent to
SSL, 41208 bytes sent to socket
2005.01.25 15:21:31 LOG5[1160:1028]: HTTP connected from 10.3.5.137:2104
2005.01.25 15:21:40 LOG5[1160:1028]: Connection closed: 2528 bytes sent to
SSL, 31275 bytes sent to socket
2005.01.25 15:21:40 LOG5[1160:512]: HTTP connected from 10.3.5.137:2122
2005.01.25 15:21:43 LOG5[1160:1992]: Connection closed: 12539 bytes sent to
SSL, 56951 bytes sent to socket
2005.01.25 15:21:45 LOG5[1160:512]: Connection closed: 1689 bytes sent to
SSL, 21416 bytes sent to socket
2005.01.25 15:21:46 LOG5[1160:2044]: HTTP connected from 10.3.5.137:2154
2005.01.25 15:21:47 LOG5[1160:2148]: HTTP connected from 10.3.5.137:2160
I have 11 config files as each one has its own client certificate. each one
contains the follow:-
CAfile=c:\STunnel\config\root.pem
cert=c:\STunnel\config\myCert_A.pem
client=Yes
debug=7
output=c:\STunnel\logs\myCert_A.log
[HTTP]
accept=3885
connect=10.70.1.81:443
thanks and rgds,spl
"Azure Technologies is the IT solutions provider of Hutchison Whampoa
Limited and a member of Hutchison Global Communications Holdings Limited."
The message is for information purposes only and is not intended to create
legally binding relations. The shareholders, directors and management of
Azure Technologies and any of its group companies accept no responsibility
and accordingly shall have no liability to any party whatsoever with
respect to the contents of this message. This message (including any
attachments) is intended only for the use of the addressee(s) named above.
It may contain information that is PRIVILEGED and CONFIDENTIAL and should
not be read, copied or otherwise used by any other person. If you are not
the intended
recipient, please erase all copies of the message (including attachments)
and notify us immediately.
PinLee_Su@azuretech
.com.sg To: stunnel-users(a)mirt.net
Sent by: cc:
stunnel-users-bounc Subject: [stunnel-users] Stunnel 4.05/4.07 Crash
es(a)mirt.net
01/28/2005 06:28 PM
Hi,
I've initiated 11 stunnel processes in the same server. Each of the
stunnel process has its own client certificate to communicate to
application server. However after sometime of execution, the stunnel
processes are crached (dying off) one by one. below is the last portion of
my log (with debug level 7). I don't see any critical error in the log.
Would appreciate if someone could highlight to me what cause the problem or
anyone has similar experience.
2005.01.25 16:02:41 LOG7[2244:1424]: 0 server connects that finished
2005.01.25 16:02:41 LOG7[2244:1424]: 0 server renegotiatiations
requested
2005.01.25 16:02:41 LOG7[2244:1424]: 486 session cache hits
2005.01.25 16:02:41 LOG7[2244:1424]: 0 session cache misses
2005.01.25 16:02:41 LOG7[2244:1424]: 0 session cache timeouts
2005.01.25 16:02:41 LOG7[2244:1424]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1804]: SSL socket closed on SSL_read
2005.01.25 16:02:41 LOG5[2244:1804]: Connection closed: 716 bytes sent to
SSL, 359 bytes sent to socket
2005.01.25 16:02:41 LOG7[2244:1804]: HTTP finished (7 left)
2005.01.25 16:02:41 LOG7[2244:1424]: SSL socket closed on SSL_read
2005.01.25 16:02:41 LOG5[2244:1424]: Connection closed: 716 bytes sent to
SSL, 304 bytes sent to socket
2005.01.25 16:02:41 LOG7[2244:1424]: HTTP finished (6 left)
2005.01.25 16:02:41 LOG7[2244:2240]: HTTP accepted FD=516 from
10.3.5.137:1405
2005.01.25 16:02:41 LOG7[2244:2240]: FD 516 in non-blocking mode
2005.01.25 16:02:41 LOG7[2244:2240]: Creating a new thread
2005.01.25 16:02:41 LOG7[2244:2240]: New thread created
2005.01.25 16:02:41 LOG7[2244:1252]: HTTP started
2005.01.25 16:02:41 LOG5[2244:1252]: HTTP connected from 10.3.5.137:1405
2005.01.25 16:02:41 LOG7[2244:1252]: FD 704 in non-blocking mode
2005.01.25 16:02:41 LOG7[2244:1252]: HTTP connecting 10.1.11.56:443
2005.01.25 16:02:41 LOG7[2244:1252]: connect_wait: waiting 10 seconds
2005.01.25 16:02:41 LOG7[2244:1252]: connect_wait: connected
2005.01.25 16:02:41 LOG7[2244:1252]: Remote FD=704 initialized
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): before/connect
initialization
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
change cipher spec A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 flush data
2005.01.25 16:02:41 LOG7[2244:1252]: 241 items in the session cache
2005.01.25 16:02:41 LOG7[2244:1252]: 979 client connects (SSL_connect())
2005.01.25 16:02:41 LOG7[2244:1252]: 979 client connects that finished
2005.01.25 16:02:41 LOG7[2244:1252]: 489 client renegotiatations requested
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server connects (SSL_accept())
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server connects that finished
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server renegotiatiations
requested
2005.01.25 16:02:41 LOG7[2244:1252]: 487 session cache hits
2005.01.25 16:02:41 LOG7[2244:1252]: 0 session cache misses
2005.01.25 16:02:41 LOG7[2244:1252]: 0 session cache timeouts
2005.01.25 16:02:41 LOG6[2244:1252]: SSL connected: previous session reused
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSL renegotiate
ciphers
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
certificate A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
certificate request A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
done A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client certificate A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client key exchange A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
certificate verify A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
change cipher spec A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 flush data
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:42 LOG7[2244:1252]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:02:42 LOG7[2244:1252]: 242 items in the session cache
2005.01.25 16:02:42 LOG7[2244:1252]: 980 client connects (SSL_connect())
2005.01.25 16:02:42 LOG7[2244:1252]: 980 client connects that finished
2005.01.25 16:02:42 LOG7[2244:1252]: 490 client renegotiatations requested
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server connects (SSL_accept())
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server connects that finished
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server renegotiatiations
requested
2005.01.25 16:02:42 LOG7[2244:1252]: 487 session cache hits
2005.01.25 16:02:42 LOG7[2244:1252]: 0 session cache misses
2005.01.25 16:02:42 LOG7[2244:1252]: 0 session cache timeouts
2005.01.25 16:02:42 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:43 LOG7[2244:2428]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:43 LOG7[2244:2284]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:43 LOG5[2244:2428]: Connection closed: 606 bytes sent to
SSL, 242 bytes sent to socket
2005.01.25 16:02:43 LOG5[2244:2284]: Connection closed: 7758 bytes sent to
SSL, 23278 bytes sent to socket
2005.01.25 16:02:43 LOG7[2244:2428]: HTTP finished (6 left)
2005.01.25 16:02:43 LOG7[2244:2284]: HTTP finished (5 left)
2005.01.25 16:02:45 LOG7[2244:1188]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:45 LOG5[2244:1188]: Connection closed: 1485 bytes sent to
SSL, 7307 bytes sent to socket
2005.01.25 16:02:47 LOG7[2244:2228]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:47 LOG5[2244:2228]: Connection closed: 667 bytes sent to
SSL, 552 bytes sent to socket
2005.01.25 16:02:49 LOG7[2244:1644]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:49 LOG5[2244:1644]: Connection closed: 667 bytes sent to
SSL, 552 bytes sent to socket
2005.01.25 16:02:50 LOG7[2244:2268]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:50 LOG5[2244:2268]: Connection closed: 418 bytes sent to
SSL, 1375 bytes sent to socket
2005.01.25 16:11:14 LOG7[2244:2240]: HTTP accepted FD=796 from
10.3.5.137:3973
2005.01.25 16:11:14 LOG7[2244:2240]: FD 796 in non-blocking mode
2005.01.25 16:11:14 LOG7[2244:2240]: Creating a new thread
2005.01.25 16:11:14 LOG7[2244:2240]: New thread created
2005.01.25 16:11:14 LOG7[2244:992]: HTTP started
2005.01.25 16:11:14 LOG5[2244:992]: HTTP connected from 10.3.5.137:3973
2005.01.25 16:11:14 LOG7[2244:992]: FD 632 in non-blocking mode
2005.01.25 16:11:14 LOG7[2244:992]: HTTP connecting 10.1.11.56:443
2005.01.25 16:11:14 LOG7[2244:992]: connect_wait: waiting 10 seconds
2005.01.25 16:11:14 LOG7[2244:992]: connect_wait: connected
2005.01.25 16:11:14 LOG7[2244:992]: Remote FD=632 initialized
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): before/connect
initialization
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write client
hello A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write change
cipher spec A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 flush data
2005.01.25 16:11:14 LOG7[2244:992]: 242 items in the session cache
2005.01.25 16:11:14 LOG7[2244:992]: 981 client connects (SSL_connect())
2005.01.25 16:11:14 LOG7[2244:992]: 981 client connects that finished
2005.01.25 16:11:14 LOG7[2244:992]: 490 client renegotiatations requested
2005.01.25 16:11:14 LOG7[2244:992]: 0 server connects (SSL_accept())
2005.01.25 16:11:14 LOG7[2244:992]: 0 server connects that finished
2005.01.25 16:11:14 LOG7[2244:992]: 0 server renegotiatiations requested
2005.01.25 16:11:14 LOG7[2244:992]: 488 session cache hits
2005.01.25 16:11:14 LOG7[2244:992]: 0 session cache misses
2005.01.25 16:11:14 LOG7[2244:992]: 0 session cache timeouts
2005.01.25 16:11:14 LOG6[2244:992]: SSL connected: previous session reused
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSL renegotiate
ciphers
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
hello A
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
certificate A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
certificate request A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
done A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
certificate A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
key exchange A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write
certificate verify A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write change
cipher spec A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 flush data
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:2268]: HTTP finished (5 left)
thanks and rgds,spl
_______________________________________________
stunnel-users mailing list
stunnel-users(a)mirt.net
http://stunnel.mirt.net/mailman/listinfo/stunnel-users
1
0
Hi,
I've initiated 11 stunnel processes in the same server. Each of the
stunnel process has its own client certificate to communicate to
application server. However after sometime of execution, the stunnel
processes are crached (dying off) one by one. below is the last portion of
my log (with debug level 7). I don't see any critical error in the log.
Would appreciate if someone could highlight to me what cause the problem or
anyone has similar experience.
2005.01.25 16:02:41 LOG7[2244:1424]: 0 server connects that finished
2005.01.25 16:02:41 LOG7[2244:1424]: 0 server renegotiatiations
requested
2005.01.25 16:02:41 LOG7[2244:1424]: 486 session cache hits
2005.01.25 16:02:41 LOG7[2244:1424]: 0 session cache misses
2005.01.25 16:02:41 LOG7[2244:1424]: 0 session cache timeouts
2005.01.25 16:02:41 LOG7[2244:1424]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1804]: SSL socket closed on SSL_read
2005.01.25 16:02:41 LOG5[2244:1804]: Connection closed: 716 bytes sent to
SSL, 359 bytes sent to socket
2005.01.25 16:02:41 LOG7[2244:1804]: HTTP finished (7 left)
2005.01.25 16:02:41 LOG7[2244:1424]: SSL socket closed on SSL_read
2005.01.25 16:02:41 LOG5[2244:1424]: Connection closed: 716 bytes sent to
SSL, 304 bytes sent to socket
2005.01.25 16:02:41 LOG7[2244:1424]: HTTP finished (6 left)
2005.01.25 16:02:41 LOG7[2244:2240]: HTTP accepted FD=516 from
10.3.5.137:1405
2005.01.25 16:02:41 LOG7[2244:2240]: FD 516 in non-blocking mode
2005.01.25 16:02:41 LOG7[2244:2240]: Creating a new thread
2005.01.25 16:02:41 LOG7[2244:2240]: New thread created
2005.01.25 16:02:41 LOG7[2244:1252]: HTTP started
2005.01.25 16:02:41 LOG5[2244:1252]: HTTP connected from 10.3.5.137:1405
2005.01.25 16:02:41 LOG7[2244:1252]: FD 704 in non-blocking mode
2005.01.25 16:02:41 LOG7[2244:1252]: HTTP connecting 10.1.11.56:443
2005.01.25 16:02:41 LOG7[2244:1252]: connect_wait: waiting 10 seconds
2005.01.25 16:02:41 LOG7[2244:1252]: connect_wait: connected
2005.01.25 16:02:41 LOG7[2244:1252]: Remote FD=704 initialized
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): before/connect
initialization
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
change cipher spec A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 flush data
2005.01.25 16:02:41 LOG7[2244:1252]: 241 items in the session cache
2005.01.25 16:02:41 LOG7[2244:1252]: 979 client connects (SSL_connect())
2005.01.25 16:02:41 LOG7[2244:1252]: 979 client connects that finished
2005.01.25 16:02:41 LOG7[2244:1252]: 489 client renegotiatations requested
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server connects (SSL_accept())
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server connects that finished
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server renegotiatiations
requested
2005.01.25 16:02:41 LOG7[2244:1252]: 487 session cache hits
2005.01.25 16:02:41 LOG7[2244:1252]: 0 session cache misses
2005.01.25 16:02:41 LOG7[2244:1252]: 0 session cache timeouts
2005.01.25 16:02:41 LOG6[2244:1252]: SSL connected: previous session reused
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSL renegotiate
ciphers
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
certificate A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
certificate request A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
done A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client certificate A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client key exchange A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
certificate verify A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
change cipher spec A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 flush data
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:42 LOG7[2244:1252]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:02:42 LOG7[2244:1252]: 242 items in the session cache
2005.01.25 16:02:42 LOG7[2244:1252]: 980 client connects (SSL_connect())
2005.01.25 16:02:42 LOG7[2244:1252]: 980 client connects that finished
2005.01.25 16:02:42 LOG7[2244:1252]: 490 client renegotiatations requested
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server connects (SSL_accept())
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server connects that finished
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server renegotiatiations
requested
2005.01.25 16:02:42 LOG7[2244:1252]: 487 session cache hits
2005.01.25 16:02:42 LOG7[2244:1252]: 0 session cache misses
2005.01.25 16:02:42 LOG7[2244:1252]: 0 session cache timeouts
2005.01.25 16:02:42 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:43 LOG7[2244:2428]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:43 LOG7[2244:2284]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:43 LOG5[2244:2428]: Connection closed: 606 bytes sent to
SSL, 242 bytes sent to socket
2005.01.25 16:02:43 LOG5[2244:2284]: Connection closed: 7758 bytes sent to
SSL, 23278 bytes sent to socket
2005.01.25 16:02:43 LOG7[2244:2428]: HTTP finished (6 left)
2005.01.25 16:02:43 LOG7[2244:2284]: HTTP finished (5 left)
2005.01.25 16:02:45 LOG7[2244:1188]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:45 LOG5[2244:1188]: Connection closed: 1485 bytes sent to
SSL, 7307 bytes sent to socket
2005.01.25 16:02:47 LOG7[2244:2228]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:47 LOG5[2244:2228]: Connection closed: 667 bytes sent to
SSL, 552 bytes sent to socket
2005.01.25 16:02:49 LOG7[2244:1644]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:49 LOG5[2244:1644]: Connection closed: 667 bytes sent to
SSL, 552 bytes sent to socket
2005.01.25 16:02:50 LOG7[2244:2268]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:50 LOG5[2244:2268]: Connection closed: 418 bytes sent to
SSL, 1375 bytes sent to socket
2005.01.25 16:11:14 LOG7[2244:2240]: HTTP accepted FD=796 from
10.3.5.137:3973
2005.01.25 16:11:14 LOG7[2244:2240]: FD 796 in non-blocking mode
2005.01.25 16:11:14 LOG7[2244:2240]: Creating a new thread
2005.01.25 16:11:14 LOG7[2244:2240]: New thread created
2005.01.25 16:11:14 LOG7[2244:992]: HTTP started
2005.01.25 16:11:14 LOG5[2244:992]: HTTP connected from 10.3.5.137:3973
2005.01.25 16:11:14 LOG7[2244:992]: FD 632 in non-blocking mode
2005.01.25 16:11:14 LOG7[2244:992]: HTTP connecting 10.1.11.56:443
2005.01.25 16:11:14 LOG7[2244:992]: connect_wait: waiting 10 seconds
2005.01.25 16:11:14 LOG7[2244:992]: connect_wait: connected
2005.01.25 16:11:14 LOG7[2244:992]: Remote FD=632 initialized
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): before/connect
initialization
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write client
hello A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write change
cipher spec A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 flush data
2005.01.25 16:11:14 LOG7[2244:992]: 242 items in the session cache
2005.01.25 16:11:14 LOG7[2244:992]: 981 client connects (SSL_connect())
2005.01.25 16:11:14 LOG7[2244:992]: 981 client connects that finished
2005.01.25 16:11:14 LOG7[2244:992]: 490 client renegotiatations requested
2005.01.25 16:11:14 LOG7[2244:992]: 0 server connects (SSL_accept())
2005.01.25 16:11:14 LOG7[2244:992]: 0 server connects that finished
2005.01.25 16:11:14 LOG7[2244:992]: 0 server renegotiatiations requested
2005.01.25 16:11:14 LOG7[2244:992]: 488 session cache hits
2005.01.25 16:11:14 LOG7[2244:992]: 0 session cache misses
2005.01.25 16:11:14 LOG7[2244:992]: 0 session cache timeouts
2005.01.25 16:11:14 LOG6[2244:992]: SSL connected: previous session reused
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSL renegotiate
ciphers
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
hello A
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
certificate A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
certificate request A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
done A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
certificate A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
key exchange A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write
certificate verify A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write change
cipher spec A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 flush data
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:2268]: HTTP finished (5 left)
thanks and rgds,spl
2
1
Hi,
I've initiated 11 stunnel processes in the same server. Each of the
stunnel process has its own client certificate to communicate to
application server. However after sometime of execution, the stunnel
processes are crached (dying off) one by one. below is the last portion of
my log (with debug level 7). I don't see any critical error in the log.
Would appreciate if someone could highlight to me what cause the problem or
anyone has similar experience.
2005.01.25 16:02:41 LOG7[2244:1424]: 0 server connects that finished
2005.01.25 16:02:41 LOG7[2244:1424]: 0 server renegotiatiations
requested
2005.01.25 16:02:41 LOG7[2244:1424]: 486 session cache hits
2005.01.25 16:02:41 LOG7[2244:1424]: 0 session cache misses
2005.01.25 16:02:41 LOG7[2244:1424]: 0 session cache timeouts
2005.01.25 16:02:41 LOG7[2244:1424]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1804]: SSL socket closed on SSL_read
2005.01.25 16:02:41 LOG5[2244:1804]: Connection closed: 716 bytes sent to
SSL, 359 bytes sent to socket
2005.01.25 16:02:41 LOG7[2244:1804]: HTTP finished (7 left)
2005.01.25 16:02:41 LOG7[2244:1424]: SSL socket closed on SSL_read
2005.01.25 16:02:41 LOG5[2244:1424]: Connection closed: 716 bytes sent to
SSL, 304 bytes sent to socket
2005.01.25 16:02:41 LOG7[2244:1424]: HTTP finished (6 left)
2005.01.25 16:02:41 LOG7[2244:2240]: HTTP accepted FD=516 from
10.3.5.137:1405
2005.01.25 16:02:41 LOG7[2244:2240]: FD 516 in non-blocking mode
2005.01.25 16:02:41 LOG7[2244:2240]: Creating a new thread
2005.01.25 16:02:41 LOG7[2244:2240]: New thread created
2005.01.25 16:02:41 LOG7[2244:1252]: HTTP started
2005.01.25 16:02:41 LOG5[2244:1252]: HTTP connected from 10.3.5.137:1405
2005.01.25 16:02:41 LOG7[2244:1252]: FD 704 in non-blocking mode
2005.01.25 16:02:41 LOG7[2244:1252]: HTTP connecting 10.1.11.56:443
2005.01.25 16:02:41 LOG7[2244:1252]: connect_wait: waiting 10 seconds
2005.01.25 16:02:41 LOG7[2244:1252]: connect_wait: connected
2005.01.25 16:02:41 LOG7[2244:1252]: Remote FD=704 initialized
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): before/connect
initialization
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
change cipher spec A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 flush data
2005.01.25 16:02:41 LOG7[2244:1252]: 241 items in the session cache
2005.01.25 16:02:41 LOG7[2244:1252]: 979 client connects (SSL_connect())
2005.01.25 16:02:41 LOG7[2244:1252]: 979 client connects that finished
2005.01.25 16:02:41 LOG7[2244:1252]: 489 client renegotiatations requested
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server connects (SSL_accept())
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server connects that finished
2005.01.25 16:02:41 LOG7[2244:1252]: 0 server renegotiatiations
requested
2005.01.25 16:02:41 LOG7[2244:1252]: 487 session cache hits
2005.01.25 16:02:41 LOG7[2244:1252]: 0 session cache misses
2005.01.25 16:02:41 LOG7[2244:1252]: 0 session cache timeouts
2005.01.25 16:02:41 LOG6[2244:1252]: SSL connected: previous session reused
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSL renegotiate
ciphers
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
certificate A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
certificate request A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 read server
done A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client certificate A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
client key exchange A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
certificate verify A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
change cipher spec A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:02:41 LOG7[2244:1252]: SSL state (connect): SSLv3 flush data
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_write returned WANT_: retrying
2005.01.25 16:02:41 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:42 LOG7[2244:1252]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:02:42 LOG7[2244:1252]: 242 items in the session cache
2005.01.25 16:02:42 LOG7[2244:1252]: 980 client connects (SSL_connect())
2005.01.25 16:02:42 LOG7[2244:1252]: 980 client connects that finished
2005.01.25 16:02:42 LOG7[2244:1252]: 490 client renegotiatations requested
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server connects (SSL_accept())
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server connects that finished
2005.01.25 16:02:42 LOG7[2244:1252]: 0 server renegotiatiations
requested
2005.01.25 16:02:42 LOG7[2244:1252]: 487 session cache hits
2005.01.25 16:02:42 LOG7[2244:1252]: 0 session cache misses
2005.01.25 16:02:42 LOG7[2244:1252]: 0 session cache timeouts
2005.01.25 16:02:42 LOG7[2244:1252]: SSL_read returned WANT_: retrying
2005.01.25 16:02:43 LOG7[2244:2428]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:43 LOG7[2244:2284]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:43 LOG5[2244:2428]: Connection closed: 606 bytes sent to
SSL, 242 bytes sent to socket
2005.01.25 16:02:43 LOG5[2244:2284]: Connection closed: 7758 bytes sent to
SSL, 23278 bytes sent to socket
2005.01.25 16:02:43 LOG7[2244:2428]: HTTP finished (6 left)
2005.01.25 16:02:43 LOG7[2244:2284]: HTTP finished (5 left)
2005.01.25 16:02:45 LOG7[2244:1188]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:45 LOG5[2244:1188]: Connection closed: 1485 bytes sent to
SSL, 7307 bytes sent to socket
2005.01.25 16:02:47 LOG7[2244:2228]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:47 LOG5[2244:2228]: Connection closed: 667 bytes sent to
SSL, 552 bytes sent to socket
2005.01.25 16:02:49 LOG7[2244:1644]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:49 LOG5[2244:1644]: Connection closed: 667 bytes sent to
SSL, 552 bytes sent to socket
2005.01.25 16:02:50 LOG7[2244:2268]: s_poll_wait timeout waiting for SSL
close_notify
2005.01.25 16:02:50 LOG5[2244:2268]: Connection closed: 418 bytes sent to
SSL, 1375 bytes sent to socket
2005.01.25 16:11:14 LOG7[2244:2240]: HTTP accepted FD=796 from
10.3.5.137:3973
2005.01.25 16:11:14 LOG7[2244:2240]: FD 796 in non-blocking mode
2005.01.25 16:11:14 LOG7[2244:2240]: Creating a new thread
2005.01.25 16:11:14 LOG7[2244:2240]: New thread created
2005.01.25 16:11:14 LOG7[2244:992]: HTTP started
2005.01.25 16:11:14 LOG5[2244:992]: HTTP connected from 10.3.5.137:3973
2005.01.25 16:11:14 LOG7[2244:992]: FD 632 in non-blocking mode
2005.01.25 16:11:14 LOG7[2244:992]: HTTP connecting 10.1.11.56:443
2005.01.25 16:11:14 LOG7[2244:992]: connect_wait: waiting 10 seconds
2005.01.25 16:11:14 LOG7[2244:992]: connect_wait: connected
2005.01.25 16:11:14 LOG7[2244:992]: Remote FD=632 initialized
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): before/connect
initialization
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write client
hello A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 read
finished A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write change
cipher spec A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:11:14 LOG7[2244:992]: SSL state (connect): SSLv3 flush data
2005.01.25 16:11:14 LOG7[2244:992]: 242 items in the session cache
2005.01.25 16:11:14 LOG7[2244:992]: 981 client connects (SSL_connect())
2005.01.25 16:11:14 LOG7[2244:992]: 981 client connects that finished
2005.01.25 16:11:14 LOG7[2244:992]: 490 client renegotiatations requested
2005.01.25 16:11:14 LOG7[2244:992]: 0 server connects (SSL_accept())
2005.01.25 16:11:14 LOG7[2244:992]: 0 server connects that finished
2005.01.25 16:11:14 LOG7[2244:992]: 0 server renegotiatiations requested
2005.01.25 16:11:14 LOG7[2244:992]: 488 session cache hits
2005.01.25 16:11:14 LOG7[2244:992]: 0 session cache misses
2005.01.25 16:11:14 LOG7[2244:992]: 0 session cache timeouts
2005.01.25 16:11:14 LOG6[2244:992]: SSL connected: previous session reused
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSL renegotiate
ciphers
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
hello A
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
hello A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
certificate A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
certificate request A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 read server
done A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
certificate A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write client
key exchange A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write
certificate verify A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write change
cipher spec A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 write
finished A
2005.01.25 16:11:15 LOG7[2244:992]: SSL state (connect): SSLv3 flush data
2005.01.25 16:11:15 LOG7[2244:992]: SSL_write returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:992]: SSL_read returned WANT_: retrying
2005.01.25 16:11:15 LOG7[2244:2268]: HTTP finished (5 left)
thanks and rgds,spl
1
0
Hi
On Tue, 25 Jan 2005 14:15:45 -0500
"Humberto Morell" <morell(a)seg.inf.cu> wrote:
> Hello list
please use the stunnel-users instead of stunnel-anounce 8)
> Cannot create pid file /var/run/stunnel.pid
(...)
> prueba:/usr/local/etc/stunnel # ls -l /var/run
(...)
> chroot = /var/lib/stunnel/
(...)
> pid = /var/run/stunnel.pid
so you cant create the pid, and you think that /var/run is
correct, but you are forgeting that you enabled the chroot,
so you have to check the /var/run inside the chroot, not
your main /var/run directory (that the chroot stunnel cant
access)
check the /var/lib/stunnel/var/run and you will find that
you dont have that directory or it have the wrong permissions
good luck
higuita
--
Daniel Mota Leite
Gestor de Sistemas/System Manager
Centro de Computação Gráfica Tel: +351 253 439 300
Rua Teixeira de Pascoais, 596 Fax: +351 253 439 348
4800-073 Guimarães Portugal
CCG and University of Minho are Members of the INI-GraphicsNet
1
0
Hi, I have problem with stunnel. I like to create stunnel on my server. I want to create SSL connection on IRCD server. I am using UnrealIRCD. I have installed Stunnel 4.07 and OpenSSL 0.9.7e. I have created certificates. I use this command stunnel -c -d 6668 -r irc.myserver.sk:6697 and then when I run ircd then display me thist error:
[Mon Jan 24 18:27:49 2005] - Error binding stream socket to IP 0.0.0.0 port 6668 - irc.myserver.sk[]:Address already in use
Can you help me ?
thanks
3
2
All,
I need to do some performance profiling on STunnel. I assume gcov and
gprof are the correct tools for this. Does anyone have any experience
profiling STunnel? Any advice on how to do it properly would be
appreciated.
Thanks
Mark Swann
1
0
Hi ,
I am new to stunnel , one of the previous develoeper has developed a application using Stunnel, essentially this app will work as a proxy to outside world and tunnel back to the remote server. On the server side the Stunnel has License.cm file and when ever I bring stunnel in CMD mode, it shows a message cannot find the License.cm file(even though it is there), Obviously the License file has expired or corrupted. How do I tell this tunnel.exe not to look for that file or how can I generate a license file(.cm)?
Pls note that the tunnel has all the required files in it's directory tunnel.pem,tunnel.conf,ssleay32.dll,libeay32.dll,ssleay32.exp), pls help this is a show stopper and is effecting the client.Any leads or direction will be much appreciated.
Thank you
Ranjit
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
2
1
I would like to request the following feature be included in subsequent releases of stunnel.
Cheers,
Jeff
Greetings,
It would be great if while installing as a service on win32, there was
an option to install quietly - i.e. only pop up a dialog box to the user
if there's a problem.
Any chance of somebody nice compiling me a binary that does this? :)
M.
--
Michael Brown {0x527670C0} | `One of the main causes of the fall of
Systems Administrator | the Roman Empire was that, lacking zero,
+1 519 888 7111 x2339 | they had no way to indicate successful
michaelb at opentext.com | termination of their C programs.' - Firth
---------------------------------
Do you Yahoo!?
Yahoo! Search presents - Jib Jab's 'Second Term'
2
1
Hi, I've recently set up stunnel for a remote vnc connection, and it's
working great. However, I would like to restrict access based on cert
(only allow access a single public key), because nobody else should be
accessing it besides my one machine.
It seems what i want is to set verify = 3, but I'm using self-signed
certs on my client, so verify = 3 fails.
Is there some way to verify the client public key without doing the
self signed test too?
I'm sorry if this is a faq -- i searched the lists and read the faq
and couldn't find anything.
Thanks!
(I'm running stunnel 4.04 on fedora1, and stunnel 4.04 on mac 10.3.7,
installed via fink)
my stunnel.conf is pretty simple.
client conf is (sans connection info)
client = yes
cert = /sw/etc/stunnel/stunnel.pem
chroot = /var/run/stunnel/
pid = /stunnel.pid
setuid = stunnel
setgid = stunnel
server conf is:
client = no
cert = /etc/stunnel/stunnel.pem
CApath = /etc/stunnel/clientdb
chroot = /var/run/stunnel/
verify=3
pid = /stunnel.pid
setuid = stunnel
setgid = stunnel
--------------------------------------------
MobyGames
http://www.mobygames.com
The world's largest and most comprehensive
gaming database project
1
0