Hi all
I would to use stunnel on a board based on the AT91RM9200.
I'm actually trying to use Stunnel 4.05 for armv4l.
I can launch it but when i try to connect to https (through a thttpd
server), nothings happen.
In the arm-linux terminal, i've got the following informations:
[root@EmbeddedLinux sbin]$./stunnel stunnel.conf
1970.01.01 03:03:47 LOG5[488:16384]: stunnel 4.04 on
armv4l-unknown-linux-gnu PTHREAD+LIBWRAP with OpenSSL
1970.01.01 03:03:47 LOG5[488:16384]: FD_SETSIZE=1024, file ulimit=1024
-> 500 clients allowed
./stunnel: relocation error: ./stunnel: undefined symbol: request_init
If any body have an idea about how to resolve this problem...
--
With regards
Fabrice JAUME
--
IFOTEC
Tél : 04 76 67 53 53
2
1
Problems compiling on AIX5.2 -- ld: 0711-317 ERROR: Undefined symbol: .inflateEnd
by Claus Lund 25 Jul '05
by Claus Lund 25 Jul '05
25 Jul '05
Hi everybody,
I am trying to get stunnel 4.11 compiled on my AIX boxes but I am not having
much luck.
I am using GCC 3.3.2 on AIX 5.2. OpenSSL has been compiled and is working on
those same boxes (OpenSSL 0.9.8).
I configured stunnel using:
root@tax178:/tmp/stunnel/stunnel-4.11
#
./configure --sysconfdir=/etc/stunnel --prefix=/usr/local --disable-libwrap
And everything seems to go OK during the config steps.
When I try to build stunnel it comes up with a series of warnings and
eventually dies with a bunch of errors.
First the warnings:
"nt.Po"; else rm -f ".deps/client.Tpo"; exit 1; fi
client.c: In function `init_local':
client.c:178: warning: passing arg 3 of `ngetpeername' from incompatible
pointer type
client.c: In function `make_sockets':
client.c:894: warning: passing arg 3 of `ngetsockname' from incompatible
pointer type
client.c:902: warning: passing arg 3 of `naccept' from incompatible pointer
type
client.c: In function `connect_wait':
client.c:996: warning: passing arg 5 of `getsockopt' from incompatible
pointer type
if gcc -DPACKAGE_NAME=\"stunnel\" -D"
"/options.Po"; else rm -f ".deps/options.Tpo"; exit 1; fi
options.c: In function `print_socket_options':
options.c:1401: warning: passing arg 5 of `getsockopt' from incompatible
pointer type
if gcc -DPACKAGE_NAME=\"stunnel\" -DPACKAGE_TARNAME=\"stunnel\""
"ps/sthreads.Tpo" ".deps/sthreads.Po"; else rm -f ".deps/sthreads.Tpo"; exit
1; fi
sthreads.c: In function `stack_info':
sthreads.c:343: warning: int format, long unsigned int arg (arg 4)
sthreads.c:343: warning: int format, long unsigned int arg (arg 5)
sthreads.c:343: warning: int format, long unsigned int arg (arg 6)
sthreads.c:343: warning: int format, long unsigned int arg (arg 7)
if gcc -DPACKAGE_NAME=\"stunnel\" -DPACKAGE_TARNAME=\"stunnel\""
"tunnel.Tpo" ".deps/stunnel.Po"; else rm -f ".deps/stunnel.Tpo"; exit 1; fi
stunnel.c: In function `accept_connection':
stunnel.c:206: warning: passing arg 3 of `naccept' from incompatible pointer
type
if gcc -DPACKAGE_NAME=\"stunnel\" -DPACKAGE_TARNAME=\"stunnel\""
And then the final errors:
"/bin/sh ../libtool --tag=CC --mode=link
gcc -g -O2 -Wall -Wshadow -Wcast-align -Wpointer-arith -I/usr/local/include
-o stunnel client.o log.o options.o protocol.o network.o resolver.o
ssl.o sthreads.o stunnel.o
pty.o -lnsl -ldl -L/usr/local/lib -lssl -lcrypto
gcc -g -O2 -Wall -Wshadow -Wcast-align -Wpointer-arith -I/usr/local/include
-o stunnel client.o log.o options.o protocol.o network.o resolver.o ssl.o
sthreads.o stunnel.o pty.o -lnsl -ldl -L/usr/local/lib -lssl -lcrypto
ld: 0711-317 ERROR: Undefined symbol: .inflateEnd
ld: 0711-317 ERROR: Undefined symbol: .deflateEnd
ld: 0711-317 ERROR: Undefined symbol: .inflateInit_
ld: 0711-317 ERROR: Undefined symbol: .deflateInit_
ld: 0711-317 ERROR: Undefined symbol: .deflate
ld: 0711-317 ERROR: Undefined symbol: .inflate
ld: 0711-345 Use the -bloadmap or -bnoquiet option to obtain more
information.
collect2: ld returned 8 exit status
make: 1254-004 The error code from the last command is 1."
Hopefully there will be some C/AIX gurus out there who can help me get past
this problem...
Thank you in advance,
Claus
2
3
I have confirmed that the problem I reported last week (on Mac OS X,
streams are truncated with a reported "s_poll_wait returned 1, but no
descriptor is ready" error) can be corrected by using the older
"select" versions of the network functions. I did this by tweaking the
source, but would like to make the fix as cleanly as possible, so...
Sorry if this is in the docs (I couldn't find it), but what is the best
way to disable the poll option?
John
2
1
Nobody has an idea??
I don't know how to resolve my problem, and i don't know where i should serach in order to resolve it...
Could you help me please??
Is "-disable-libwrap" the problem? or should it work without libwrap?
Thanks a lot!
-------- Original Message --------
Subject: Re-5: [stunnel-users] Problem with mysql (21-juil.-2005 10:00)
From: lmarcilly(a)aressi.fr
To: lmarcilly(a)aressi.fr
> Sorry, i doesn't look in the good stunnel.log, there is a SIGTERM because i
> stop the box!
>
> So here is my stunnel.log :
>
> 2005.07.21 11:48:25 LOG5[230:1]: stunnel 4.11 on i686-pc-linux-gnu UCONTEXT+
> POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
> 2005.07.21 11:48:26 LOG7[230:1]: RAND_status claims sufficient entropy for
> the PRNG
> 2005.07.21 11:48:26 LOG6[230:1]: PRNG seeded successfully
> 2005.07.21 11:48:26 LOG6[230:1]: file ulimit = 1024 (can be changed with '
> ulimit -n')
> 2005.07.21 11:48:26 LOG6[230:1]: poll() used - no FD_SETSIZE limit for file
> descriptors
> 2005.07.21 11:48:26 LOG5[230:1]: 500 clients allowed
> 2005.07.21 11:48:26 LOG7[230:1]: FD 4 in non-blocking mode
> 2005.07.21 11:48:26 LOG7[230:1]: FD 5 in non-blocking mode
> 2005.07.21 11:48:26 LOG7[230:1]: FD 6 in non-blocking mode
> 2005.07.21 11:48:26 LOG7[230:1]: SO_REUSEADDR option set on accept socket
> 2005.07.21 11:48:26 LOG7[230:1]: mysql bound to 127.0.0.1:3306
> 2005.07.21 11:48:26 LOG7[231:1]: Created pid file /stunnel.pid
>
> So it seems to run properly but telnet 192.168.1.121 3306 ot telnet
> localhost 3306 doesn't work, i get a time out!
>
> I will give you more informations :
>
> stunnel-4.11 on an lfs system (Kernel 2.4.30 with the bridge patch and the
> SSP patch)
>
> gcc -v :
>
> Reading specs from /home/lmarcilly/lfs_install/build/usr/bin/../lib/gcc-lib/
> i686-pc-linux-gnu/3.3.3/specs
> Configured with: ../gcc-3.3.3/configure --prefix=/usr --enable-shared --
> enable-threads=posix --enable-__cxa_atexit --enable-clocale=gnu --enable-
> languages=c,c++ --disable-nls
> Thread model: posix
> gcc version 3.3.3
>
> When compiling :
>
> ./configure --prefix=/usr --disable-libwrap
> make
> make install
>
> stunnel.conf :
>
> chroot = /usr/var/stunnel/
> pid = /stunnel.pid
> socket = l:TCP_NODELAY=1
> socket = r:TCP_NODELAY=1
> debug = 7
> output = /var/log/stunnel.log
> client = yes
> [mysql]
> accept = localhost:3306
> connect = 192.168.1.104:3307
>
> I've also tried with accept = 3306 and accept = 127.0.0.1:3306 but with no
> success...
>
> I'm sorry but i have no idea and i don't know how resolve my problem so
> please help me...
>
> Thanks in advance!
>
> lm.
>
> -------- Original Message --------
> Subject: Re-4: [stunnel-users] Problem with mysql (21-juil.-2005 9:26)
> From: lmarcilly(a)aressi.fr
> To: lmarcilly(a)aressi.fr
>
> > I try :
> >
> > mysql -h 192.168.1.121 --protocol=TCP -u user --password=xxx
> >
> > and i get this message :
> >
> > Can't connect to MySQL server on '192.168.1.121'
> >
> > I also try :
> >
> > telnet 192.168.1.121 3306
> >
> > and i get :
> >
> > telnet : Unable to connect to remote host : Connection timed out
> >
> > Here is my stunnel.log :
> >
> > 2005.07.21 11:13:07 LOG5[2462:1]: stunnel 4.11 on i686-pc-linux-gnu
> > UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
> > 2005.07.21 11:13:07 LOG7[2462:1]: Snagged 64 random bytes from /root/.rnd
> > 2005.07.21 11:13:07 LOG7[2462:1]: Wrote 1024 new random bytes to /root/.rnd
> > 2005.07.21 11:13:07 LOG7[2462:1]: RAND_status claims sufficient entropy for
> >
> > the PRNG
> > 2005.07.21 11:13:07 LOG6[2462:1]: PRNG seeded successfully
> > 2005.07.21 11:13:07 LOG6[2462:1]: file ulimit = 1024 (can be changed with '
> > ulimit -n')
> > 2005.07.21 11:13:07 LOG6[2462:1]: poll() used - no FD_SETSIZE limit for
> > file descriptors
> > 2005.07.21 11:13:07 LOG5[2462:1]: 500 clients allowed
> > 2005.07.21 11:13:07 LOG7[2462:1]: FD 4 in non-blocking mode
> > 2005.07.21 11:13:07 LOG7[2462:1]: FD 5 in non-blocking mode
> > 2005.07.21 11:13:07 LOG7[2462:1]: FD 6 in non-blocking mode
> > 2005.07.21 11:13:07 LOG7[2462:1]: SO_REUSEADDR option set on accept socket
> > 2005.07.21 11:13:07 LOG7[2462:1]: mysql bound to 127.0.0.1:3306
> > 2005.07.21 11:13:07 LOG7[2463:1]: Created pid file /stunnel.pid
> > 2005.07.21 11:15:58 LOG5[2463:0]: Received signal 15; terminating
> > 2005.07.21 11:15:58 LOG7[2463:0]: removing pid file /stunnel.pid
> >
> > And i think the last 2 lines are not normal!!
> > But how can i see from where come the SIGTERM ?? There is always a stunnel
> > process but it doesn't work properly...
> >
> > Any idea?
> >
> > -------- Original Message --------
> > Subject: Re: Re-2: [stunnel-users] Problem with mysql (21-juil.-2005 9:13)
> > From: bri(a)stunnel.org
> > To: lmarcilly(a)aressi.fr
> >
> > >
> > >
> > > > How to do this? I try with :
> > > > mysql --port=3306 --protocol=TCP -u user --password=xxx
> > > >
> > > > but it won't work...
> > > >
> > > > When i try telnet localhost 3306, i can't establish connection but i can on
> > > >
> > > >
> > > > my windows box... I also try to analyse traffic with tcpdump and there is
> > > > no packet when i try with stunnel...
> > >
> > > I've found in the past that mysql when pointing to localhost has
> > > used the socket in spite of the arguments you put on the command line.
> > >
> > > Try pointing to the ethernet IP address instead of 127.0.0.1 and
> > > see if it's happy then. You never know...
> > >
> > > --
> > > Brian Hatch "I've decided I'm not keen on
> > > Systems and preterm labour."
> > > Security Engineer "I'll write that down in our
> > > http://www.ifokr.org/bri/ birthing plan..."
> > > --Bree and Bri, in L&D.
> > > Every message PGP signed
> > >
> >
> >
> > To: bri(a)stunnel.org
> > Cc: Michal.Trojnara(a)mobi-com.net
> > stunnel-users(a)mirt.net
> >
> >
> >
> > _______________________________________________
> > stunnel-users mailing list
> > stunnel-users(a)mirt.net
> > http://stunnel.mirt.net/mailman/listinfo/stunnel-users
>
>
> To: lmarcilly(a)aressi.fr
> bri(a)stunnel.org
> Cc: stunnel-users(a)mirt.net
To: lmarcilly(a)aressi.fr
bri(a)stunnel.org
Cc: stunnel-users(a)mirt.net
1
0
Sorry, i doesn't look in the good stunnel.log, there is a SIGTERM because i stop the box!
So here is my stunnel.log :
2005.07.21 11:48:25 LOG5[230:1]: stunnel 4.11 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
2005.07.21 11:48:26 LOG7[230:1]: RAND_status claims sufficient entropy for the PRNG
2005.07.21 11:48:26 LOG6[230:1]: PRNG seeded successfully
2005.07.21 11:48:26 LOG6[230:1]: file ulimit = 1024 (can be changed with 'ulimit -n')
2005.07.21 11:48:26 LOG6[230:1]: poll() used - no FD_SETSIZE limit for file descriptors
2005.07.21 11:48:26 LOG5[230:1]: 500 clients allowed
2005.07.21 11:48:26 LOG7[230:1]: FD 4 in non-blocking mode
2005.07.21 11:48:26 LOG7[230:1]: FD 5 in non-blocking mode
2005.07.21 11:48:26 LOG7[230:1]: FD 6 in non-blocking mode
2005.07.21 11:48:26 LOG7[230:1]: SO_REUSEADDR option set on accept socket
2005.07.21 11:48:26 LOG7[230:1]: mysql bound to 127.0.0.1:3306
2005.07.21 11:48:26 LOG7[231:1]: Created pid file /stunnel.pid
So it seems to run properly but telnet 192.168.1.121 3306 ot telnet localhost 3306 doesn't work, i get a time out!
I will give you more informations :
stunnel-4.11 on an lfs system (Kernel 2.4.30 with the bridge patch and the SSP patch)
gcc -v :
Reading specs from /home/lmarcilly/lfs_install/build/usr/bin/../lib/gcc-lib/i686-pc-linux-gnu/3.3.3/specs
Configured with: ../gcc-3.3.3/configure --prefix=/usr --enable-shared --enable-threads=posix --enable-__cxa_atexit --enable-clocale=gnu --enable-languages=c,c++ --disable-nls
Thread model: posix
gcc version 3.3.3
When compiling :
./configure --prefix=/usr --disable-libwrap
make
make install
stunnel.conf :
chroot = /usr/var/stunnel/
pid = /stunnel.pid
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
debug = 7
output = /var/log/stunnel.log
client = yes
[mysql]
accept = localhost:3306
connect = 192.168.1.104:3307
I've also tried with accept = 3306 and accept = 127.0.0.1:3306 but with no success...
I'm sorry but i have no idea and i don't know how resolve my problem so please help me...
Thanks in advance!
lm.
-------- Original Message --------
Subject: Re-4: [stunnel-users] Problem with mysql (21-juil.-2005 9:26)
From: lmarcilly(a)aressi.fr
To: lmarcilly(a)aressi.fr
> I try :
>
> mysql -h 192.168.1.121 --protocol=TCP -u user --password=xxx
>
> and i get this message :
>
> Can't connect to MySQL server on '192.168.1.121'
>
> I also try :
>
> telnet 192.168.1.121 3306
>
> and i get :
>
> telnet : Unable to connect to remote host : Connection timed out
>
> Here is my stunnel.log :
>
> 2005.07.21 11:13:07 LOG5[2462:1]: stunnel 4.11 on i686-pc-linux-gnu
> UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
> 2005.07.21 11:13:07 LOG7[2462:1]: Snagged 64 random bytes from /root/.rnd
> 2005.07.21 11:13:07 LOG7[2462:1]: Wrote 1024 new random bytes to /root/.rnd
> 2005.07.21 11:13:07 LOG7[2462:1]: RAND_status claims sufficient entropy for
> the PRNG
> 2005.07.21 11:13:07 LOG6[2462:1]: PRNG seeded successfully
> 2005.07.21 11:13:07 LOG6[2462:1]: file ulimit = 1024 (can be changed with '
> ulimit -n')
> 2005.07.21 11:13:07 LOG6[2462:1]: poll() used - no FD_SETSIZE limit for
> file descriptors
> 2005.07.21 11:13:07 LOG5[2462:1]: 500 clients allowed
> 2005.07.21 11:13:07 LOG7[2462:1]: FD 4 in non-blocking mode
> 2005.07.21 11:13:07 LOG7[2462:1]: FD 5 in non-blocking mode
> 2005.07.21 11:13:07 LOG7[2462:1]: FD 6 in non-blocking mode
> 2005.07.21 11:13:07 LOG7[2462:1]: SO_REUSEADDR option set on accept socket
> 2005.07.21 11:13:07 LOG7[2462:1]: mysql bound to 127.0.0.1:3306
> 2005.07.21 11:13:07 LOG7[2463:1]: Created pid file /stunnel.pid
> 2005.07.21 11:15:58 LOG5[2463:0]: Received signal 15; terminating
> 2005.07.21 11:15:58 LOG7[2463:0]: removing pid file /stunnel.pid
>
> And i think the last 2 lines are not normal!!
> But how can i see from where come the SIGTERM ?? There is always a stunnel
> process but it doesn't work properly...
>
> Any idea?
>
> -------- Original Message --------
> Subject: Re: Re-2: [stunnel-users] Problem with mysql (21-juil.-2005 9:13)
> From: bri(a)stunnel.org
> To: lmarcilly(a)aressi.fr
>
> >
> >
> > > How to do this? I try with :
> > > mysql --port=3306 --protocol=TCP -u user --password=xxx
> > >
> > > but it won't work...
> > >
> > > When i try telnet localhost 3306, i can't establish connection but i can on
> > >
> > > my windows box... I also try to analyse traffic with tcpdump and there is
> > > no packet when i try with stunnel...
> >
> > I've found in the past that mysql when pointing to localhost has
> > used the socket in spite of the arguments you put on the command line.
> >
> > Try pointing to the ethernet IP address instead of 127.0.0.1 and
> > see if it's happy then. You never know...
> >
> > --
> > Brian Hatch "I've decided I'm not keen on
> > Systems and preterm labour."
> > Security Engineer "I'll write that down in our
> > http://www.ifokr.org/bri/ birthing plan..."
> > --Bree and Bri, in L&D.
> > Every message PGP signed
> >
>
>
> To: bri(a)stunnel.org
> Cc: Michal.Trojnara(a)mobi-com.net
> stunnel-users(a)mirt.net
>
>
>
> _______________________________________________
> stunnel-users mailing list
> stunnel-users(a)mirt.net
> http://stunnel.mirt.net/mailman/listinfo/stunnel-users
To: lmarcilly(a)aressi.fr
bri(a)stunnel.org
Cc: stunnel-users(a)mirt.net
1
0
I try :
mysql -h 192.168.1.121 --protocol=TCP -u user --password=xxx
and i get this message :
Can't connect to MySQL server on '192.168.1.121'
I also try :
telnet 192.168.1.121 3306
and i get :
telnet : Unable to connect to remote host : Connection timed out
Here is my stunnel.log :
2005.07.21 11:13:07 LOG5[2462:1]: stunnel 4.11 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
2005.07.21 11:13:07 LOG7[2462:1]: Snagged 64 random bytes from /root/.rnd
2005.07.21 11:13:07 LOG7[2462:1]: Wrote 1024 new random bytes to /root/.rnd
2005.07.21 11:13:07 LOG7[2462:1]: RAND_status claims sufficient entropy for the PRNG
2005.07.21 11:13:07 LOG6[2462:1]: PRNG seeded successfully
2005.07.21 11:13:07 LOG6[2462:1]: file ulimit = 1024 (can be changed with 'ulimit -n')
2005.07.21 11:13:07 LOG6[2462:1]: poll() used - no FD_SETSIZE limit for file descriptors
2005.07.21 11:13:07 LOG5[2462:1]: 500 clients allowed
2005.07.21 11:13:07 LOG7[2462:1]: FD 4 in non-blocking mode
2005.07.21 11:13:07 LOG7[2462:1]: FD 5 in non-blocking mode
2005.07.21 11:13:07 LOG7[2462:1]: FD 6 in non-blocking mode
2005.07.21 11:13:07 LOG7[2462:1]: SO_REUSEADDR option set on accept socket
2005.07.21 11:13:07 LOG7[2462:1]: mysql bound to 127.0.0.1:3306
2005.07.21 11:13:07 LOG7[2463:1]: Created pid file /stunnel.pid
2005.07.21 11:15:58 LOG5[2463:0]: Received signal 15; terminating
2005.07.21 11:15:58 LOG7[2463:0]: removing pid file /stunnel.pid
And i think the last 2 lines are not normal!!
But how can i see from where come the SIGTERM ?? There is always a stunnel process but it doesn't work properly...
Any idea?
-------- Original Message --------
Subject: Re: Re-2: [stunnel-users] Problem with mysql (21-juil.-2005 9:13)
From: bri(a)stunnel.org
To: lmarcilly(a)aressi.fr
>
>
> > How to do this? I try with :
> > mysql --port=3306 --protocol=TCP -u user --password=xxx
> >
> > but it won't work...
> >
> > When i try telnet localhost 3306, i can't establish connection but i can on
> > my windows box... I also try to analyse traffic with tcpdump and there is
> > no packet when i try with stunnel...
>
> I've found in the past that mysql when pointing to localhost has
> used the socket in spite of the arguments you put on the command line.
>
> Try pointing to the ethernet IP address instead of 127.0.0.1 and
> see if it's happy then. You never know...
>
> --
> Brian Hatch "I've decided I'm not keen on
> Systems and preterm labour."
> Security Engineer "I'll write that down in our
> http://www.ifokr.org/bri/ birthing plan..."
> --Bree and Bri, in L&D.
> Every message PGP signed
>
To: bri(a)stunnel.org
Cc: Michal.Trojnara(a)mobi-com.net
stunnel-users(a)mirt.net
1
0
> <lmarcilly(a)aressi.fr> wrote:
> > so i think stunnel doesn't work properly...
> [cut]
> > 2005.07.20 14:07:13 LOG5[14715:0]: Received signal 15; terminating
> > 2005.07.20 14:07:13 LOG7[14715:0]: removing pid file /stunnel.pid
>
> That's quite common to stop working (properly) for a process after
> receiving
> signal 15 (SIGTERM). 8-)
>
Yes but the file stunnel.pid always exist... and when i type ps aux | grep stunnel, there is always a stunnel process...
> > mysql -u user --password=xyz i have :
> > Can't connect to local MySQL server through socket
> > '/var/run/mysqld/mysqld.
> > sock'
> >
> > This socket doesn't exist since there is no MySQL server on the box.
>
> Did you configure your MySQL client to connect stunnel instead of default
> /var/run/mysqld/mysqld.sock UNIX socket?
>
> The problem is your MySQL client configuration, *not* stunnel.
How to do this? I try with :
mysql --port=3306 --protocol=TCP -u user --password=xxx
but it won't work...
When i try telnet localhost 3306, i can't establish connection but i can on my windows box... I also try to analyse traffic with tcpdump and there is no packet when i try with stunnel...
>
> Best regards,
> Mike
>
> _______________________________________________
> stunnel-users mailing list
> stunnel-users(a)mirt.net
> http://stunnel.mirt.net/mailman/listinfo/stunnel-users
To: Michal.Trojnara(a)mobi-com.net
stunnel-users(a)mirt.net
2
1
We have been using Stunnel 4.05 now for quite sometime now with OpenSSL
0.97d.I had a question regarding the SSL Version.When I look into the
Stunnel.log I see
Negotiated ciphers: AES256-SHA SSLv3 Kx=RSA Au=RSA
Enc=AES(256) Mac=SHA1
This means that stunnel is using AES-256-SHA1 which uses SSL v3. Is it
standard for stunnel4.05 to use SSL v3 or is it dependent on the OpenSSL
Version.
We haven't configured anything in the stunnel.conf to use SSL v3.
Thanks,
Vasudha.
--------------------------------------------
Vasudha Upadhyaya
Convergys Speech Solutions
Ph:703-885-5837
vasudha.upadhyaya(a)convergys.com
--
"NOTICE: The information contained in this electronic mail transmission is
intended by Convergys Corporation for the use of the named individual or
entity to which it is directed and may contain information that is
privileged or otherwise confidential. If you have received this electronic
mail transmission in error, please delete it from your system without
copying or forwarding it, and notify the sender of the error by reply email
or by telephone (collect), so that the sender's address records can be
corrected."
1
0
I try to analyse traffic with tcpdump and when i use stunnel, there is no packets with my linux box ip so i think stunnel doesn't work properly...
Here is the stunnel.log :
2005.07.20 12:58:23 LOG5[14714:1]: stunnel 4.11 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
2005.07.20 12:58:23 LOG7[14714:1]: Snagged 64 random bytes from /root/.rnd
2005.07.20 12:58:23 LOG7[14714:1]: Wrote 1024 new random bytes to /root/.rnd
2005.07.20 12:58:23 LOG7[14714:1]: RAND_status claims sufficient entropy for the PRNG
2005.07.20 12:58:23 LOG6[14714:1]: PRNG seeded successfully
2005.07.20 12:58:23 LOG7[14714:1]: Certificate: /usr/etc/stunnel/stunnel.pem
2005.07.20 12:58:23 LOG7[14714:1]: Key file: /usr/etc/stunnel/stunnel.pem
2005.07.20 12:58:23 LOG6[14714:1]: file ulimit = 1024 (can be changed with 'ulimit -n')
2005.07.20 12:58:23 LOG6[14714:1]: poll() used - no FD_SETSIZE limit for file descriptors
2005.07.20 12:58:23 LOG5[14714:1]: 500 clients allowed
2005.07.20 12:58:23 LOG7[14714:1]: FD 4 in non-blocking mode
2005.07.20 12:58:23 LOG7[14714:1]: FD 5 in non-blocking mode
2005.07.20 12:58:23 LOG7[14714:1]: FD 6 in non-blocking mode
2005.07.20 12:58:23 LOG7[14714:1]: SO_REUSEADDR option set on accept socket
2005.07.20 12:58:23 LOG7[14714:1]: mysql bound to 0.0.0.0:3306
2005.07.20 12:58:23 LOG7[14715:1]: Created pid file /stunnel.pid
2005.07.20 14:07:13 LOG5[14715:0]: Received signal 15; terminating
2005.07.20 14:07:13 LOG7[14715:0]: removing pid file /stunnel.pid
When i look at stunnel.pid, there is 231 in the file and it is the stunnel pid...
In my stunnel.conf, i have put client=yes and
[mysql]
accept = 3306
connect = 192.198.10.120:3307
and on my stunnel server :
[mysql]
accept = 3307
connect = localhost:3306
It works with my mysql client on windows (v4.1.12a) but not with my mysql client on linux (v4.1.8a). Perhaps the difference of version is the problem but i think not...
Which options are applied when windows binaries of stunnel are compiled? Perhaps i have to change option when i compile on my linux box...
Thanks in advance!
lm.
-------- Original Message --------
Subject: [stunnel-users] Problem with mysql (20-juil.-2005 11:41)
From: lmarcilly(a)aressi.fr
To: lmarcilly(a)aressi.fr
> Hi all,
>
> i try to encrypt mysql connections...
>
> I saw this : http://www.stunnel.org/examples/mysql.html
>
> but i use stunnel4.x.
>
> I configure it on my windows box and it work well! (mysql server is on a
> linux box, i have configure stunnel as a server on this box)
>
> when i try mysql -u user --password=xyz it works
>
> but i have to made it work on a linux box.
> I use the same config file for stunnel, but when i try
>
> mysql -u user --password=xyz i have :
> Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.
> sock'
>
> This socket doesn't exist since there is no MySQL server on the box.
>
> I try with --protocol=TCP but it won't work, i have :
>
> Can't connect to MySQL server on 'localhost'
>
> Do you have an idea? Do you want more details on my config file for stunnel?
>
>
> Thanks in advance and sorry for my english!
>
> lm
>
>
> _______________________________________________
> stunnel-users mailing list
> stunnel-users(a)mirt.net
> http://stunnel.mirt.net/mailman/listinfo/stunnel-users
To: lmarcilly(a)aressi.fr
stunnel-users(a)mirt.net
2
1
I have just remember that tcp_wrapper is not installed on my box... When compiling stunnel, i use :
./configure --prefix=/usr --disable-libwrap
make
make install
I think libwrap is not necessary but perhaps i am wrong... Tcp wrapper is used in order to filter traffic?
Could you explain me?
Thanks a lot!
-------- Original Message --------
Subject: Re: [stunnel-users] Problem with mysql (20-juil.-2005 14:47)
From: lmarcilly(a)aressi.fr
To: lmarcilly(a)aressi.fr
> I try to analyse traffic with tcpdump and when i use stunnel, there is no
> packets with my linux box ip so i think stunnel doesn't work properly...
> Here is the stunnel.log :
>
> 2005.07.20 12:58:23 LOG5[14714:1]: stunnel 4.11 on i686-pc-linux-gnu
> UCONTEXT+POLL+IPv4 with OpenSSL 0.9.7g 11 Apr 2005
> 2005.07.20 12:58:23 LOG7[14714:1]: Snagged 64 random bytes from /root/.rnd
> 2005.07.20 12:58:23 LOG7[14714:1]: Wrote 1024 new random bytes to /root/.
> rnd
> 2005.07.20 12:58:23 LOG7[14714:1]: RAND_status claims sufficient entropy
> for the PRNG
> 2005.07.20 12:58:23 LOG6[14714:1]: PRNG seeded successfully
> 2005.07.20 12:58:23 LOG7[14714:1]: Certificate: /usr/etc/stunnel/stunnel.
> pem
> 2005.07.20 12:58:23 LOG7[14714:1]: Key file: /usr/etc/stunnel/stunnel.pem
> 2005.07.20 12:58:23 LOG6[14714:1]: file ulimit = 1024 (can be changed with '
> ulimit -n')
> 2005.07.20 12:58:23 LOG6[14714:1]: poll() used - no FD_SETSIZE limit for
> file descriptors
> 2005.07.20 12:58:23 LOG5[14714:1]: 500 clients allowed
> 2005.07.20 12:58:23 LOG7[14714:1]: FD 4 in non-blocking mode
> 2005.07.20 12:58:23 LOG7[14714:1]: FD 5 in non-blocking mode
> 2005.07.20 12:58:23 LOG7[14714:1]: FD 6 in non-blocking mode
> 2005.07.20 12:58:23 LOG7[14714:1]: SO_REUSEADDR option set on accept socket
> 2005.07.20 12:58:23 LOG7[14714:1]: mysql bound to 0.0.0.0:3306
> 2005.07.20 12:58:23 LOG7[14715:1]: Created pid file /stunnel.pid
> 2005.07.20 14:07:13 LOG5[14715:0]: Received signal 15; terminating
> 2005.07.20 14:07:13 LOG7[14715:0]: removing pid file /stunnel.pid
>
> When i look at stunnel.pid, there is 231 in the file and it is the stunnel
> pid...
>
> In my stunnel.conf, i have put client=yes and
>
> [mysql]
> accept = 3306
> connect = 192.198.10.120:3307
>
> and on my stunnel server :
>
> [mysql]
> accept = 3307
> connect = localhost:3306
>
> It works with my mysql client on windows (v4.1.12a) but not with my mysql
> client on linux (v4.1.8a). Perhaps the difference of version is the problem
> but i think not...
>
> Which options are applied when windows binaries of stunnel are compiled?
> Perhaps i have to change option when i compile on my linux box...
>
> Thanks in advance!
>
> lm.
>
> -------- Original Message --------
> Subject: [stunnel-users] Problem with mysql (20-juil.-2005 11:41)
> From: lmarcilly(a)aressi.fr
> To: lmarcilly(a)aressi.fr
>
> > Hi all,
> >
> > i try to encrypt mysql connections...
> >
> > I saw this : http://www.stunnel.org/examples/mysql.html
> >
> > but i use stunnel4.x.
> >
> > I configure it on my windows box and it work well! (mysql server is on a
> > linux box, i have configure stunnel as a server on this box)
> >
> > when i try mysql -u user --password=xyz it works
> >
> > but i have to made it work on a linux box.
> > I use the same config file for stunnel, but when i try
> >
> > mysql -u user --password=xyz i have :
> > Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.
> > sock'
> >
> > This socket doesn't exist since there is no MySQL server on the box.
> >
> > I try with --protocol=TCP but it won't work, i have :
> >
> > Can't connect to MySQL server on 'localhost'
> >
> > Do you have an idea? Do you want more details on my config file for stunnel?
> >
> >
> >
> > Thanks in advance and sorry for my english!
> >
> > lm
> >
> >
> > _______________________________________________
> > stunnel-users mailing list
> > stunnel-users(a)mirt.net
> > http://stunnel.mirt.net/mailman/listinfo/stunnel-users
>
>
> To: lmarcilly(a)aressi.fr
> stunnel-users(a)mirt.net
To: lmarcilly(a)aressi.fr
stunnel-users(a)mirt.net
1
0