Dear friends,
I use stunnel for a long time to provide pop3s connections inside a
local network. It is quite an old linux server under 2.4 kernel. Stunnel
is started from xinetd.
xinetd.conf:
service pop3s
{
socket_type = stream
wait = no
user = root
server = /usr/local/bin/stunnel
server_args = /usr/local/etc/stunnel/pop3s.conf
bind = [ip_address]
}
/usr/local/etc/stunnel/pop3s.conf:
cert = /usr/local/etc/stunnel/mail.pem
debug = debug
exec = /usr/local/sbin/popa3d
execargs = popa3d
Everything worked perfectly before 4.30, but when I installed 4.30 pop3s
connections just stopped. There is absolutely nothing in logs, just
start and stop; example:
Mar 24 20:29:51 aldema xinetd[2235]: START: pop3s pid=19123 from=[ip]
Mar 24 20:29:51 aldema xinetd[2235]: EXIT: pop3s status=1 pid=19123 duration=0(sec)
It is "all.log", i.e. syslog puts everything (*.*) into this file.
If starting xinetd with '-v' option, nothing interesting is shown in its
own verbose output.
When I use 4.29 all.log looks like (with debug = info):
Mar 21 09:40:04 aldema xinetd[2235]: START: pop3s pid=32516 from=[ip]
Mar 21 09:40:04 aldema stunnel: LOG5[32516:16384]: stunnel 4.29 on i686-pc-linux-gnu with OpenSSL 0.9.7e
Mar 21 09:40:04 aldema stunnel: LOG5[32516:16384]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
Mar 21 09:40:04 aldema stunnel: LOG5[32516:16384]: stunnel accepted connection from[ip]:4020
Mar 21 09:40:04 aldema stunnel: LOG6[32516:16384]: SSL accepted: new session negotiated
Mar 21 09:40:04 aldema stunnel: LOG6[32516:16384]: Negotiated ciphers: AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
Mar 21 09:40:04 aldema stunnel: LOG6[32516:16384]: Local mode child started (PID=32517)
Mar 21 09:40:05 aldema popa3d[32517]: Authentication passed for [username] from 127.0.0.1
Mar 21 09:40:05 aldema popa3d[32517]: 0 messages (0 bytes) loaded
Mar 21 09:40:05 aldema popa3d[32517]: 0 (0) deleted, 0 (0) left
Mar 21 09:40:05 aldema stunnel: LOG6[32516:16384]: SSL_shutdown successfully sent close_notify
Mar 21 09:40:05 aldema stunnel: LOG5[32516:16384]: Connection closed: 29 bytes sent to SSL, 48 bytes sent to socket
Mar 21 09:40:05 aldema xinetd[2235]: EXIT: pop3s status=0 pid=32516 duration=1(sec)
When 4.30 was released I thought it may be buggy because it was marked
"experimental", but now I see 4.32 and the same behaviour. Actually, I
don't know what to do... nothing in logs really confuses me. Does it
mean stunnel crashes at startup (running "stunnel -version" is OK)? Any
ideas? Thank you.
With the best regards,
Denis Solovyov
