Hi all,
I'm looking at building a small GUI app (possibly in VB6) on a Windows
platform for generating certificates using OpenSSL. How can I do this? The
command-line call to the openssl EXE does not seem to take things such as
the Common Name, Organizational Unit, etc as parameters.
Any help would be appreciated.
Thanks in advance.
Paul
_________________________________________________________________
SEEK: Over 80,000 jobs across all industries at Australia's #1 job site.
http://ninemsn.seek.com.au?hotmail
1
1
Hello Michal, thank you for your excellent software!
I have a little suggestion: Could you include release files' MD5 and
SHA hash codes or your pgp signature in the release announcement? That
should be more reliable, should it?
--
Regards
Lu Wei
1
0
Hi,
Does anybody know if stunnel would work under QNX4?
Or has anybody seen a port to QNX4? I downloaded the
sources but I haven't been able to compile them.
Thank you
____________________________________________________
Yahoo! Sports
Rekindle the Rivalries. Sign up for Fantasy Football
http://football.fantasysports.yahoo.com
1
0
I have been having some major problems trying to secure pop3 and imap with
stunnel. I am running a RHEL3 box with Cpanel. I first started off by
installing a clean copy of stunnel 4.10 but it was causing numerous bizarre
problems. 1) it would crash after a few hours of the daemon operating, 2)
before it would crash I would be getting tons of 'mailbox locked' errors and
3) the occasional timeout connecting. I eventually gave up with 4.10 and
decided to try to use the stunnel 4.04 that was already doing https for
cpanel/whm. I created a separate config file and ran a separate daemon just
for pop/imap (I did this because I want them to be using different SSL
certs). This seemed to be working perfectly as there were no timeouts, no
locked mailbox errors and it didn't seem to be crashing. After about 24
hours however, the process had shut down. I tried a few more times and
again after about 12-24 hours of running my pop/imap only stunnel daemon
crashes. I should also mention 2 other things: 1) prior to having set up
4.10 on my box, stunnel 4.04 was listening for pop/imap without crashing (it
just wasn't being used however). 2) The other daemon running https for
cpanel/whm hasn't crashed at all.
I've included the log (level 7) for everything that happened in the 1-2
seconds before it crashed. If anyone could offer any advice, it would be
greatly appreciated!
Thanks!
David
Info needed:
1) Running stunnel by executing "/usr/bin/stunnel-4.04local
/usr/local/cpanel/etc/stunnel/my/stunnel2.conf"
2) Output of "stunnel -version":
stunnel 4.04 on i386-redhat-linux-gnu PTHREAD+LIBWRAP with OpenSSL 0.9.7a
Feb 19 2003
Global options
cert = /etc/stunnel/stunnel.pem
ciphers = ALL:!ADH:+RC4:@STRENGTH
debug = 5
key = /etc/stunnel/stunnel.pem
pid = /var/run/stunnel.pid
RNDbytes = 64
RNDfile = /dev/urandom
RNDoverwrite = yes
session = 300 seconds
verify = none
Service-level options
TIMEOUTbusy = 300 seconds
TIMEOUTclose = 60 seconds
TIMEOUTidle = 43200 seconds
3) Output of "uname -a":
Linux MY.HOSTNAME.COM 2.4.21-15.0.3.EL #1 Tue Jun 29 18:17:52 EDT 2004 i686
i686 i386 GNU/Linux
4) Your libc version:
Version 6
5) Output of "gcc -v":
Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.2.3/specs
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man
--infodir=/usr/share/info --enable-shared --enable-threads=posix
--disable-checking --with-system-zlib --enable-__cxa_atexit
--host=i386-redhat-linux
Thread model: posix
gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-52)
6) Output of "openssl version":
OpenSSL 0.9.7a Feb 19 2003
7) Log before crash:
2005.06.19 05:10:30 LOG7[7052:3209298656]: pop3s accepted FD=8 from
82.123.194.23:63627
2005.06.19 05:10:30 LOG7[7052:3209298656]: FD 8 in non-blocking mode
2005.06.19 05:10:30 LOG7[7052:3200814000]: pop3s started
2005.06.19 05:10:30 LOG5[7052:3200814000]: pop3s connected from
82.123.194.23:63627
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): before/accept
initialization
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: FD=8, DIR=read
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: ok
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 read
client hello A
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 write
server hello A
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 write
certificate A
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 write
server done A
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: FD=8, DIR=read
2005.06.19 05:10:30 LOG7[7052:3209298656]: pop3s accepted FD=9 from
82.123.194.23:63628
2005.06.19 05:10:30 LOG7[7052:3209298656]: FD 9 in non-blocking mode
2005.06.19 05:10:30 LOG7[7052:3209206704]: pop3s started
2005.06.19 05:10:30 LOG5[7052:3209206704]: pop3s connected from
82.123.194.23:63628
2005.06.19 05:10:30 LOG7[7052:3209206704]: SSL state (accept): before/accept
initialization
2005.06.19 05:10:30 LOG7[7052:3209206704]: waitforsocket: FD=9, DIR=read
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: ok
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 read
client key exchange A
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: FD=8, DIR=read
2005.06.19 05:10:30 LOG7[7052:3209206704]: waitforsocket: ok
2005.06.19 05:10:30 LOG7[7052:3209206704]: SSL state (accept): SSLv3 read
client hello A
2005.06.19 05:10:30 LOG7[7052:3209206704]: SSL state (accept): SSLv3 write
server hello A
2005.06.19 05:10:30 LOG7[7052:3209206704]: SSL state (accept): SSLv3 write
certificate A
2005.06.19 05:10:30 LOG7[7052:3209206704]: SSL state (accept): SSLv3 write
server done A
2005.06.19 05:10:30 LOG7[7052:3209206704]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:30 LOG7[7052:3209206704]: waitforsocket: FD=9, DIR=read
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: ok
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: FD=8, DIR=read
2005.06.19 05:10:30 LOG7[7052:3209206704]: waitforsocket: ok
2005.06.19 05:10:30 LOG7[7052:3209206704]: SSL state (accept): SSLv3 read
client key exchange A
2005.06.19 05:10:30 LOG7[7052:3209206704]: waitforsocket: FD=9, DIR=read
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: ok
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 read
finished A
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 write
change cipher spec A
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 write
finished A
2005.06.19 05:10:30 LOG7[7052:3200814000]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:30 LOG7[7052:3200814000]: 113 items in the session cache
2005.06.19 05:10:30 LOG7[7052:3200814000]: 0 client connects
(SSL_connect())
2005.06.19 05:10:30 LOG7[7052:3200814000]: 0 client connects that
finished
2005.06.19 05:10:30 LOG7[7052:3200814000]: 0 client renegotiatations
requested
2005.06.19 05:10:30 LOG7[7052:3200814000]: 622 server connects
(SSL_accept())
2005.06.19 05:10:30 LOG7[7052:3200814000]: 621 server connects that
finished
2005.06.19 05:10:30 LOG7[7052:3200814000]: 0 server renegotiatiations
requested
2005.06.19 05:10:30 LOG7[7052:3200814000]: 0 session cache hits
2005.06.19 05:10:30 LOG7[7052:3200814000]: 0 session cache misses
2005.06.19 05:10:30 LOG7[7052:3200814000]: 0 session cache timeouts
2005.06.19 05:10:30 LOG6[7052:3200814000]: Negotiated ciphers: DES-CBC3-SHA
SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
2005.06.19 05:10:30 LOG7[7052:3200814000]: FD 10 in non-blocking mode
2005.06.19 05:10:30 LOG7[7052:3200814000]: pop3s connecting 127.0.0.1:110
2005.06.19 05:10:30 LOG7[7052:3200814000]: remote connect #1: EINPROGRESS:
retrying
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: FD=10, DIR=write
2005.06.19 05:10:30 LOG7[7052:3200814000]: waitforsocket: ok
2005.06.19 05:10:30 LOG7[7052:3200814000]: Remote FD=10 initialized
2005.06.19 05:10:30 LOG7[7052:3209298656]: pop3s accepted FD=11 from
82.123.194.23:63631
2005.06.19 05:10:30 LOG7[7052:3209298656]: FD 11 in non-blocking mode
2005.06.19 05:10:30 LOG7[7052:3192421296]: pop3s started
2005.06.19 05:10:30 LOG5[7052:3192421296]: pop3s connected from
82.123.194.23:63631
2005.06.19 05:10:30 LOG7[7052:3192421296]: SSL state (accept): before/accept
initialization
2005.06.19 05:10:30 LOG7[7052:3192421296]: waitforsocket: FD=11, DIR=read
2005.06.19 05:10:31 LOG7[7052:3192421296]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 read
client hello A
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 write
server hello A
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 write
certificate A
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 write
server done A
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:31 LOG7[7052:3192421296]: waitforsocket: FD=11, DIR=read
2005.06.19 05:10:31 LOG7[7052:3209206704]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3209206704]: waitforsocket: FD=9, DIR=read
2005.06.19 05:10:31 LOG7[7052:3209298656]: pop3s accepted FD=12 from
82.123.194.23:63632
2005.06.19 05:10:31 LOG7[7052:3209298656]: FD 12 in non-blocking mode
2005.06.19 05:10:31 LOG7[7052:3184028592]: pop3s started
2005.06.19 05:10:31 LOG5[7052:3184028592]: pop3s connected from
82.123.194.23:63632
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): before/accept
initialization
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: FD=12, DIR=read
2005.06.19 05:10:31 LOG7[7052:3209206704]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3209206704]: SSL state (accept): SSLv3 read
finished A
2005.06.19 05:10:31 LOG7[7052:3209206704]: SSL state (accept): SSLv3 write
change cipher spec A
2005.06.19 05:10:31 LOG7[7052:3209206704]: SSL state (accept): SSLv3 write
finished A
2005.06.19 05:10:31 LOG7[7052:3209206704]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:31 LOG7[7052:3209206704]: 114 items in the session cache
2005.06.19 05:10:31 LOG7[7052:3209206704]: 0 client connects
(SSL_connect())
2005.06.19 05:10:31 LOG7[7052:3209206704]: 0 client connects that
finished
2005.06.19 05:10:31 LOG7[7052:3209206704]: 0 client renegotiatations
requested
2005.06.19 05:10:31 LOG7[7052:3209206704]: 624 server connects
(SSL_accept())
2005.06.19 05:10:31 LOG7[7052:3209206704]: 622 server connects that
finished
2005.06.19 05:10:31 LOG7[7052:3209206704]: 0 server renegotiatiations
requested
2005.06.19 05:10:31 LOG7[7052:3209206704]: 0 session cache hits
2005.06.19 05:10:31 LOG7[7052:3209206704]: 0 session cache misses
2005.06.19 05:10:31 LOG7[7052:3209206704]: 0 session cache timeouts
2005.06.19 05:10:31 LOG6[7052:3209206704]: Negotiated ciphers: DES-CBC3-SHA
SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
2005.06.19 05:10:31 LOG7[7052:3209206704]: FD 13 in non-blocking mode
2005.06.19 05:10:31 LOG7[7052:3209206704]: pop3s connecting 127.0.0.1:110
2005.06.19 05:10:31 LOG7[7052:3209206704]: remote connect #1: EINPROGRESS:
retrying
2005.06.19 05:10:31 LOG7[7052:3209206704]: waitforsocket: FD=13, DIR=write
2005.06.19 05:10:31 LOG7[7052:3209206704]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3209206704]: Remote FD=13 initialized
2005.06.19 05:10:31 LOG7[7052:3192421296]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 read
client key exchange A
2005.06.19 05:10:31 LOG7[7052:3192421296]: waitforsocket: FD=11, DIR=read
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 read
client hello A
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 write
server hello A
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 write
certificate A
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 write
server done A
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: FD=12, DIR=read
2005.06.19 05:10:31 LOG7[7052:3192421296]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 read
finished A
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 write
change cipher spec A
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 write
finished A
2005.06.19 05:10:31 LOG7[7052:3192421296]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:31 LOG7[7052:3192421296]: 115 items in the session cache
2005.06.19 05:10:31 LOG7[7052:3192421296]: 0 client connects
(SSL_connect())
2005.06.19 05:10:31 LOG7[7052:3192421296]: 0 client connects that
finished
2005.06.19 05:10:31 LOG7[7052:3192421296]: 0 client renegotiatations
requested
2005.06.19 05:10:31 LOG7[7052:3192421296]: 624 server connects
(SSL_accept())
2005.06.19 05:10:31 LOG7[7052:3192421296]: 623 server connects that
finished
2005.06.19 05:10:31 LOG7[7052:3192421296]: 0 server renegotiatiations
requested
2005.06.19 05:10:31 LOG7[7052:3192421296]: 0 session cache hits
2005.06.19 05:10:31 LOG7[7052:3192421296]: 0 session cache misses
2005.06.19 05:10:31 LOG7[7052:3192421296]: 0 session cache timeouts
2005.06.19 05:10:31 LOG6[7052:3192421296]: Negotiated ciphers: DES-CBC3-SHA
SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
2005.06.19 05:10:31 LOG7[7052:3192421296]: FD 14 in non-blocking mode
2005.06.19 05:10:31 LOG7[7052:3192421296]: pop3s connecting 127.0.0.1:110
2005.06.19 05:10:31 LOG7[7052:3192421296]: remote connect #1: EINPROGRESS:
retrying
2005.06.19 05:10:31 LOG7[7052:3192421296]: waitforsocket: FD=14, DIR=write
2005.06.19 05:10:31 LOG7[7052:3192421296]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3192421296]: Remote FD=14 initialized
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 read
client key exchange A
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: FD=12, DIR=read
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 read
finished A
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 write
change cipher spec A
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 write
finished A
2005.06.19 05:10:31 LOG7[7052:3184028592]: SSL state (accept): SSLv3 flush
data
2005.06.19 05:10:31 LOG7[7052:3184028592]: 116 items in the session cache
2005.06.19 05:10:31 LOG7[7052:3184028592]: 0 client connects
(SSL_connect())
2005.06.19 05:10:31 LOG7[7052:3184028592]: 0 client connects that
finished
2005.06.19 05:10:31 LOG7[7052:3184028592]: 0 client renegotiatations
requested
2005.06.19 05:10:31 LOG7[7052:3184028592]: 624 server connects
(SSL_accept())
2005.06.19 05:10:31 LOG7[7052:3184028592]: 624 server connects that
finished
2005.06.19 05:10:31 LOG7[7052:3184028592]: 0 server renegotiatiations
requested
2005.06.19 05:10:31 LOG7[7052:3184028592]: 0 session cache hits
2005.06.19 05:10:31 LOG7[7052:3184028592]: 0 session cache misses
2005.06.19 05:10:31 LOG7[7052:3184028592]: 0 session cache timeouts
2005.06.19 05:10:31 LOG6[7052:3184028592]: Negotiated ciphers: DES-CBC3-SHA
SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
2005.06.19 05:10:31 LOG7[7052:3184028592]: FD 15 in non-blocking mode
2005.06.19 05:10:31 LOG7[7052:3184028592]: pop3s connecting 127.0.0.1:110
2005.06.19 05:10:31 LOG7[7052:3184028592]: remote connect #1: EINPROGRESS:
retrying
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: FD=15, DIR=write
2005.06.19 05:10:31 LOG7[7052:3184028592]: waitforsocket: ok
2005.06.19 05:10:31 LOG7[7052:3184028592]: Remote FD=15 initialized
2005.06.19 05:10:33 LOG7[7052:3200814000]: Socket closed on read
2005.06.19 05:10:33 LOG7[7052:3200814000]: SSL alert (write): warning: close
notify
2005.06.19 05:10:33 LOG7[7052:3200814000]: SSL write shutdown (output buffer
empty)
2005.06.19 05:10:34 LOG7[7052:3209206704]: Socket closed on read
2005.06.19 05:10:34 LOG7[7052:3209206704]: SSL alert (write): warning: close
notify
2005.06.19 05:10:34 LOG7[7052:3209206704]: SSL write shutdown (output buffer
empty)
2005.06.19 05:10:34 LOG7[7052:3192421296]: Socket closed on read
2005.06.19 05:10:34 LOG7[7052:3192421296]: SSL alert (write): warning: close
notify
2005.06.19 05:10:34 LOG7[7052:3192421296]: SSL write shutdown (output buffer
empty)
2005.06.19 05:10:34 LOG7[7052:3200814000]: SSL socket closed on SSL_read
2005.06.19 05:10:34 LOG5[7052:3200814000]: Connection closed: 3470 bytes
sent to SSL, 42 bytes sent to socket
2005.06.19 05:10:34 LOG7[7052:3200814000]: pop3s finished (3 left)
2005.06.19 05:10:34 LOG7[7052:3209206704]: SSL socket closed on SSL_read
2005.06.19 05:10:34 LOG5[7052:3209206704]: Connection closed: 3342 bytes
sent to SSL, 53 bytes sent to socket
2005.06.19 05:10:34 LOG7[7052:3209206704]: pop3s finished (2 left)
2005.06.19 05:10:34 LOG7[7052:3192421296]: SSL socket closed on SSL_read
2005.06.19 05:10:34 LOG5[7052:3192421296]: Connection closed: 480 bytes sent
to SSL, 47 bytes sent to socket
2005.06.19 05:10:34 LOG7[7052:3192421296]: pop3s finished (1 left)
2005.06.19 05:10:34 LOG7[7052:3184028592]: Socket closed on read
2005.06.19 05:10:34 LOG7[7052:3184028592]: SSL alert (write): warning: close
notify
2005.06.19 05:10:34 LOG7[7052:3184028592]: SSL write shutdown (output buffer
empty)
2005.06.19 05:10:34 LOG7[7052:3184028592]: SSL socket closed on SSL_read
2005.06.19 05:10:34 LOG5[7052:3184028592]: Connection closed: 1934 bytes
sent to SSL, 51 bytes sent to socket
2005.06.19 05:10:34 LOG7[7052:3184028592]: pop3s finished (0 left)
2
3
I use stunnel for testing and compare results with our products. I made a
script to monitor the number of threads and memory per process, now it
always show 1 thread.
On Fri, 17 Jun 2005 23:55:57 +0300, Michal Trojnara
<Michal.Trojnara(a)mirt.net> wrote:
>> Now it's ok, but I want the pthreads back :)
>
> Why?
>
> Mike
--
Using Opera's revolutionary e-mail client: http://www.opera.com/m2/
2
1
eh..I've missed that, it looks like a workaroud.
Now it's ok, but I want the pthreads back :)
On Fri, 17 Jun 2005 22:02:05 +0300, Michal Trojnara
<Michal.Trojnara(a)mirt.net> wrote:
> Did you try this one:
> http://stunnel.mirt.net/pipermail/stunnel-users/2005-June/000532.html
> ?
>
> Best regards,
> Mike
1
0
I get a segmentation fault on first connect.
To the default config, i've added the debug = 7 and foreground = yes.
I have used for comparison 2 versions 4.09 and 4.10 compiled with default
options (./configure, make, make install)
It seems like UCONTEXT is not welcome on my machine.
linux:~ # uname -a
Linux linux 2.4.20-4GB #1 Mon Mar 17 17:54:44 UTC 2003 i686 unknown
unknown GNU/Linux
linux:~ # gcc -v
Reading specs from /usr/lib/gcc-lib/i486-suse-linux/3.3/specs
Configured with: ../configure --enable-threads=posix --prefix=/usr
--with-local-prefix=/usr/local --infodir=/usr/share/info
--mandir=/usr/share/man --libdir=/usr/lib
--enable-languages=c,c++,f77,objc,java,ada --disable-checking
--enable-libgcj
--with-gxx-include-dir=/usr/include/g++ --with-slibdir=/lib
--with-system-zlib --enable-shared --enable-__cxa_atexit i486-suse-linux
Thread model: posix
gcc version 3.3 20030226 (prerelease) (SuSE Linux)
linux:~ # openssl version
OpenSSL 0.9.7g 11 Apr 2005
linux:/usr/src/stunnel-4.10 # /usr/local/sbin/stunnel
2005.06.17 11:44:17 LOG5[10371:1]: stunnel 4.10 on i686-pc-linux-gnu
UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005
2005.06.17 11:44:17 LOG7[10371:1]: RAND_status claims sufficient entropy
for the PRNG
2005.06.17 11:44:17 LOG6[10371:1]: PRNG seeded successfully
2005.06.17 11:44:17 LOG7[10371:1]: Certificate:
/usr/local/etc/stunnel/server.pem
2005.06.17 11:44:17 LOG7[10371:1]: Key file:
/usr/local/etc/stunnel/server.pem
2005.06.17 11:44:17 LOG6[10371:1]: file ulimit = 1024 (can be changed with
'ulimit -n')
2005.06.17 11:44:17 LOG6[10371:1]: poll() used - no FD_SETSIZE limit for
file descriptors
2005.06.17 11:44:17 LOG5[10371:1]: 500 clients allowed
2005.06.17 11:44:17 LOG7[10371:1]: FD 3 in non-blocking mode
2005.06.17 11:44:17 LOG7[10371:1]: FD 4 in non-blocking mode
2005.06.17 11:44:17 LOG7[10371:1]: FD 5 in non-blocking mode
2005.06.17 11:44:17 LOG7[10371:1]: SO_REUSEADDR option set on accept socket
2005.06.17 11:44:17 LOG7[10371:1]: pop3s bound to 0.0.0.0:995
2005.06.17 11:44:17 LOG7[10371:1]: FD 6 in non-blocking mode
2005.06.17 11:44:18 LOG7[10371:1]: SO_REUSEADDR option set on accept socket
2005.06.17 11:44:18 LOG7[10371:1]: https bound to 0.0.0.0:443
2005.06.17 11:44:18 LOG7[10371:1]: Created pid file /stunnel.pid
2005.06.17 11:44:18 LOG7[10371:0]: Waiting -1 second(s) for 3 file
descriptor(s)
2005.06.17 11:44:20 LOG7[10371:0]: CONTEXT 1, FD=3, (IN)->()
2005.06.17 11:44:20 LOG7[10371:0]: CONTEXT 1, FD=5, (IN)->(IN)
2005.06.17 11:44:20 LOG7[10371:0]: CONTEXT 1, FD=6, (IN)->()
2005.06.17 11:44:20 LOG7[10371:1]: pop3s accepted FD=7 from
172.16.203.52:2148
2005.06.17 11:44:20 LOG7[10371:1]: Creating a new context
2005.06.17 11:44:20 LOG7[10371:1]: Context 2 created
Segmentation fault
linux:/usr/src/stunnel-4.09 # /usr/local/sbin/stunnel
2005.06.17 11:45:13 LOG5[10773:16384]: stunnel 4.09 on i686-pc-linux-gnu
PTHREAD+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005
2005.06.17 11:45:13 LOG7[10773:16384]: RAND_status claims sufficient
entropy for the PRNG
2005.06.17 11:45:13 LOG6[10773:16384]: PRNG seeded successfully
2005.06.17 11:45:13 LOG7[10773:16384]: Certificate:
/usr/local/etc/stunnel/server.pem
2005.06.17 11:45:13 LOG7[10773:16384]: Key file:
/usr/local/etc/stunnel/server.pem
2005.06.17 11:45:13 LOG6[10773:16384]: file ulimit = 1024 (can be changed
with 'ulimit -n')
2005.06.17 11:45:13 LOG6[10773:16384]: poll() used - no FD_SETSIZE limit
for file descriptors
2005.06.17 11:45:13 LOG5[10773:16384]: 500 clients allowed
2005.06.17 11:45:13 LOG7[10773:16384]: FD 3 in non-blocking mode
2005.06.17 11:45:13 LOG7[10773:16384]: FD 4 in non-blocking mode
2005.06.17 11:45:13 LOG7[10773:16384]: FD 5 in non-blocking mode
2005.06.17 11:45:13 LOG7[10773:16384]: SO_REUSEADDR option set on accept
socket
2005.06.17 11:45:13 LOG7[10773:16384]: pop3s bound to 0.0.0.0:995
2005.06.17 11:45:13 LOG7[10773:16384]: FD 6 in non-blocking mode
2005.06.17 11:45:13 LOG7[10773:16384]: SO_REUSEADDR option set on accept
socket
2005.06.17 11:45:13 LOG7[10773:16384]: https bound to 0.0.0.0:443
2005.06.17 11:45:13 LOG7[10773:16384]: Created pid file /stunnel.pid
2005.06.17 11:45:15 LOG7[10773:16384]: pop3s accepted FD=7 from
172.16.203.52:2150
2005.06.17 11:45:15 LOG7[10773:16384]: FD 7 in non-blocking mode
2005.06.17 11:45:15 LOG7[10779:16386]: pop3s started
2005.06.17 11:45:15 LOG7[10779:16386]: TCP_NODELAY option set on local
socket
2005.06.17 11:45:15 LOG5[10779:16386]: pop3s connected from
172.16.203.52:2150
2005.06.17 11:45:15 LOG7[10779:16386]: SSL state (accept): before/accept
initialization
2005.06.17 11:45:18 LOG3[10779:16386]: SSL_accept: Peer suddenly
disconnected
2005.06.17 11:45:18 LOG7[10779:16386]: pop3s finished (0 left)
--
Using Opera's revolutionary e-mail client: http://www.opera.com/m2/
1
0
Hi,
I'm using stunnel with Sun Calendar on a Windows 2003 server.
Everything works well until I'v move Sun Calendar on an other server.
Now, when I go to my Sun Calendar, I need to refresh the page after having accepted the certificat.
You can see the problem here => https://frodon.atnweb.com
I'm using
stunnel 4.10
libeay32.dll and libssl.dll version 0.9.7.3 (from openssl.org)
My conf file looks like this:
-------------------------------
key = E:\stunnel\stunnel.pem
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
debug = 3
output = E:\stunnel\stunnel.log
[https]
accept = 443
connect = 80
TIMEOUTclose = 0
--------------------------------
If someone can see where is the problem, I will be pleased to know the answer :)
Thanks,
Regards,
Michaël CHANUDET
atn groupe sa
2 allée des Mitaillères - 38240 Meylan - France
Tél. : +33 (0)4.76.41.17.17 - Fax : +33 (0)4.76.41.05.45
www.atngroupe.fr
2
1
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This is a reply to
http://stunnel.mirt.net/pipermail/stunnel-users/2005-June/000541.html
but it has nothing to do with oritignal subject, so I send it
separately.
CVS version of the FreeBSD port of stunnel can be found at:
http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/stunnel/
the files/ subdir contains some changes to the original source.
Some of them are FreeBSD specific and need only be applied on FreeBSD,
but some are not.
Changes to client.c are related to execvp problems.
http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/stunnel/files/patch-sr…
can be useful.
Changes to common.h are a hack to make it possible for the user to
choose ucontext/pthread/fork model at compile time. Log message can be
found at:
http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/stunnel/files/patch-sr…
It was invented as a workaround to the ucontext-problems, but is a good
feature anyway.
I think it will be great if someday we can use ./configure options like
- --with-ucontext, --with-pthread, --with-fork, instead of using this
ugly hack :)
Regards,
Vasil
-----BEGIN PGP SIGNATURE-----
iD8DBQFCsQ7pFw6SP/bBpCARAo3wAKDbu0lXx0+LMW31dksb4S8M74PukQCgwmwx
KH0/Ohi+GtUwBSbYv8RkLsg=
=wzW2
-----END PGP SIGNATURE-----
1
0
Hello
having a problem with stunnel sigsegv'ing on a machine
answers to list questions below:
1. https to/from IPs bound on same machine
the contents of my config file:
cert = /usr/local/etc/poundcert.pem
foreground = yes
[poundssl]
connect = xx.xx.xx.xx:80
accept = xx.xx.xx.xx:443
foreground option because I was debugging, does it with or without this option.
2. 4.10
3. standalone, /usr/local/sbin/stunnel /usr/local/etc/stunnel.cfg
4. -D and -f aren't flags in version I am using apparently. assume -D 7 is debug
level debug (7)
I'll add the log from a single session, all I am doing is connecting from a
mozilla client and it instantly segfaults:
# /usr/local/sbin/stunnel /usr/local/etc/stunnel.cfg
2005.06.15 10:02:21 LOG5[1245:1]: stunnel 4.10 on i686-pc-linux-gnu
UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005
2005.06.15 10:02:21 LOG7[1245:1]: Snagged 64 random bytes from /root/.rnd
2005.06.15 10:02:21 LOG7[1245:1]: Wrote 1024 new random bytes to /root/.rnd
2005.06.15 10:02:21 LOG7[1245:1]: RAND_status claims sufficient entropy for the
PRNG
2005.06.15 10:02:21 LOG6[1245:1]: PRNG seeded successfully
2005.06.15 10:02:21 LOG7[1245:1]: Certificate: /usr/local/etc/poundcert.pem
2005.06.15 10:02:21 LOG7[1245:1]: Key file: /usr/local/etc/poundcert.pem
2005.06.15 10:02:21 LOG6[1245:1]: file ulimit = 1024 (can be changed with
'ulimit -n')
2005.06.15 10:02:21 LOG6[1245:1]: poll() used - no FD_SETSIZE limit for file
descriptors
2005.06.15 10:02:21 LOG5[1245:1]: 500 clients allowed
2005.06.15 10:02:21 LOG7[1245:1]: FD 3 in non-blocking mode
2005.06.15 10:02:21 LOG7[1245:1]: FD 4 in non-blocking mode
2005.06.15 10:02:21 LOG7[1245:1]: FD 5 in non-blocking mode
2005.06.15 10:02:21 LOG7[1245:1]: SO_REUSEADDR option set on accept socket
2005.06.15 10:02:21 LOG7[1245:1]: poundssl bound to xx.xx.xx.xx:443
2005.06.15 10:02:21 LOG7[1245:1]: Created pid file
/usr/local/var/run/stunnel.pid
2005.06.15 10:02:21 LOG7[1245:0]: Waiting -1 second(s) for 2 file descriptor(s)
2005.06.15 10:02:39 LOG7[1245:0]: CONTEXT 1, FD=3, (IN)->()
2005.06.15 10:02:39 LOG7[1245:0]: CONTEXT 1, FD=5, (IN)->(IN)
2005.06.15 10:02:39 LOG7[1245:1]: poundssl accepted FD=6 from xx.xx.xx.xx:3939
2005.06.15 10:02:39 LOG7[1245:1]: Creating a new context
2005.06.15 10:02:39 LOG7[1245:1]: Context 2 created
Segmentation fault
5. /usr/local/sbin/stunnel -version
stunnel 4.10 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g
11 Apr 2005
Global options
cert = /usr/local/etc/stunnel/stunnel.pem
ciphers = ALL:!ADH:+RC4:@STRENGTH
debug = 5
key = /usr/local/etc/stunnel/stunnel.pem
pid = /usr/local/var/run/stunnel.pid
RNDbytes = 64
RNDfile = /dev/urandom
RNDoverwrite = yes
session = 300 seconds
verify = none
Service-level options
TIMEOUTbusy = 300 seconds
TIMEOUTclose = 60 seconds
TIMEOUTconnect = 10 seconds
TIMEOUTidle = 43200 seconds
6. uname -a
Linux hsc14 2.4.27 #1 SMP Fri Feb 11 09:13:33 EST 2005 i686 i686 i386 GNU/Linux
7. # /lib/libc.so.6
GNU C Library stable release version 2.3.2, by Roland McGrath et al.
Copyright (C) 2003 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
Compiled by GNU CC version 3.2.2 20030222 (Red Hat Linux 3.2.2-5).
Compiled on a Linux 2.4.20 system on 2003-02-27.
Available extensions:
GNU libio by Per Bothner
crypt add-on version 2.1 by Michael Glad and others
linuxthreads-0.10 by Xavier Leroy
BIND-8.2.3-T5B
libthread_db work sponsored by Alpha Processor Inc
NIS(YP)/NIS+ NSS modules 0.19 by Thorsten Kukuk
Thread-local storage support included.
8.]# gcc -v
Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/specs
Configured with: ../configure --prefix=/usr --mandir=/usr/share/man
--infodir=/usr/share/info --enable-shared --enable-threads=posix
--disable-checking --with-system-zlib --enable-__cxa_atexit
--host=i386-redhat-linux
Thread model: posix
gcc version 3.2.2 20030222 (Red Hat Linux 3.2.2-5)
9. ok maybe this is a problem?
# ]# openssl version
OpenSSL 0.9.7a Feb 19 2003
but:
[root@hsc14 etc]# grep "OpenSSL 0.9.7a" /usr/local/sbin/stunnel
[root@hsc14 etc]# grep "OpenSSL 0.9.7g" /usr/local/sbin/stunnel
Binary file /usr/local/sbin/stunnel matches
which -a openssl only shows one binary and it's that old one.
additionally here is the output of gdb:
[root@hsc14 etc]# gdb /usr/local/sbin/stunnel
GNU gdb Red Hat Linux (5.3post-0.20021129.18rh)
Copyright 2003 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...
(gdb) set arg /usr/local/etc/stunnel.cfg
(gdb) run
Starting program: /usr/local/sbin/stunnel /usr/local/etc/stunnel.cfg
[New Thread 16384 (LWP 20866)]
2005.06.15 09:44:11 LOG5[20866:1]: stunnel 4.10 on i686-pc-linux-gnu UCONTEXT+PO
LL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005
2005.06.15 09:44:11 LOG5[20866:1]: 500 clients allowed
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 20866)]
0x40026f0c in __pthread_internal_tsd_get () from /lib/libpthread.so.0
(gdb) bt
#0 0x40026f0c in __pthread_internal_tsd_get () from /lib/libpthread.so.0
#1 0x40105edd in malloc () from /lib/libc.so.6
#2 0x400f59e3 in __fopen_internal () from /lib/libc.so.6
#3 0x400f5aae in fopen@@GLIBC_2.1 () from /lib/libc.so.6
#4 0x4008c28b in hosts_access () from /usr/lib/libwrap.so.0
#5 0x4008c207 in hosts_access () from /usr/lib/libwrap.so.0
#6 0x0804b9d9 in auth_libwrap (c=0x4009225c) at client.c:706
#7 0x0804a535 in init_local (c=0x811d638) at client.c:196
#8 0x0804a3b1 in do_client (c=0x811d638) at client.c:143
#9 0x0804a338 in client (arg=0x811d638) at client.c:120
#10 0x400d84b4 in __makecontext () from /lib/libc.so.6
any help is much appreciated. let me know if you need any more information.
Thank you,
brian
3
5