November 2012 - stunnel-users

Stunnel 4 failing to connect to gmail
by Asif Iqbal 10 Dec '20

10 Dec '20

I am faling to connect to gmail. Not sure what that bind error means. iqbala@ghar:~$ sudo stunnel4 2008.12.15 13:53:17 LOG7[3839:3083650736]: Snagged 64 random bytes from /home/iqbala/.rnd 2008.12.15 13:53:17 LOG7[3839:3083650736]: Wrote 1024 new random bytes to /home/iqbala/.rnd 2008.12.15 13:53:17 LOG7[3839:3083650736]: RAND_status claims sufficient entropy for the PRNG 2008.12.15 13:53:17 LOG7[3839:3083650736]: PRNG seeded successfully 2008.12.15 13:53:17 LOG7[3839:3083650736]: Certificate: /etc/stunnel/stunnel.pem 2008.12.15 13:53:17 LOG7[3839:3083650736]: Certificate loaded 2008.12.15 13:53:17 LOG7[3839:3083650736]: Key file: /etc/stunnel/stunnel.pem 2008.12.15 13:53:17 LOG7[3839:3083650736]: Private key loaded 2008.12.15 13:53:17 LOG7[3839:3083650736]: SSL context initialized for service ssmtp 2008.12.15 13:53:17 LOG5[3839:3083650736]: stunnel 4.22 on i486-pc-linux-gnu with OpenSSL 0.9.8g 19 Oct 2007 2008.12.15 13:53:17 LOG5[3839:3083650736]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP 2008.12.15 13:53:17 LOG6[3839:3083650736]: file ulimit = 1024 (can be changed with 'ulimit -n') 2008.12.15 13:53:17 LOG6[3839:3083650736]: poll() used - no FD_SETSIZE limit for file descriptors 2008.12.15 13:53:17 LOG5[3839:3083650736]: 500 clients allowed 2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 10 in non-blocking mode 2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 11 in non-blocking mode 2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 12 in non-blocking mode 2008.12.15 13:53:17 LOG7[3839:3083650736]: SO_REUSEADDR option set on accept socket 2008.12.15 13:53:17 LOG3[3839:3083650736]: Error binding ssmtp to 74.125.93.111:587 2008.12.15 13:53:17 LOG3[3839:3083650736]: bind: Cannot assign requested address (99) Here is how my conf file looks like iqbala@ghar:~$ cat /etc/stunnel/stunnel.conf | egrep -v "^;|^$" cert = /etc/stunnel/stunnel.pem foreground = yes sslVersion = SSLv3 chroot = /var/lib/stunnel4/ setuid = stunnel4 setgid = stunnel4 pid = /stunnel4.pid socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 debug = 7 output = /var/log/stunnel4/stunnel.log client = yes [ssmtp] accept = smtp.gmail.com:587 connect = 25 Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

5 9

stunnel and hosts.allow
by Yousef Alhashemi 05 Jul '16

05 Jul '16

Hi, This may be a little bit off-topic, but does anyone here use stunnel with pan? My connections to stunnel (in pan) are always refused by libwrap. I was looking for the right rule to add to /etc/hosts.allow but nothing seems to work aside from "ALL : ALL" (which is obviously not good) and "nntps: KNOWN". Is the latter reasonable? The hosts_access(5) manpage is confusing to say the least. It mentions that daemon (the first token on any line) is the name of the daemon running the process, which would be "stunnel" in my case, but using "stunnel : LOCAL" or even "stunnel : ALL" doesn't work. The rule that seems to work, as mentioned, is "nntps : KNOWN" ("nntps" being the group name in stunnel.conf). What's even more confusing to me is that "nntps : LOCAL" does not work either. Nor does "nntps : localhost 127.0.0.1", "nntps : localhost", "nntps : 127.0.0.1", or "nntps : 192.168.1.". Pan is running on the same machine as stunnel so all connections must be coming from localhost. Why do these rules not trigger? Either way, I'd like to know the "least permissive" hosts.allow rule that would allow me to connect to my news provider from pan, and/or whether "nntps : KNOWN" is a safe option. Thanks, Yousef

3 6

Fw: High memory usage problem.
by mkanet＠yahoo.com 27 Mar '13

27 Mar '13

Jeremy, I know there's an android build of stunnel. Im not trying to be funny, but are you running stunnel on your mobile phone? :) The latest android mobile phones include quadcore CPU's with 2GB's of RAM It would be interesting to see how much of a load a mobile phone can handle with a USB to RJ45 Ethernet interface. Edit: I tried sending this earlier, but it doesn't look like it went through. My apologies in case this is a duplicate. ------------------------ Thanks for taking the time to read this. We're operating on a low spec system that can not be modified at this point. stunnel was introduced at the last minute, without consideration to resource requirements and now consumes enough ram to cause the kernel to issue OOM exceptions. So in short, we are trying to trade increased CPU usage for less memory usage and have tried setting “sessions” to 3600 to reduce memory pressure, but unfortunately it doesn't last. Our current solution is to cron a restart of stunnel on a regular basis, but would prefer to limit number of threads or number of cache entries or something else altogether similarly gentler. Thanks again for your consideration and assistance in this! If there's any specific information I can give, please let me know. Regards, Jeremy

3 7

Win CE build errors: main_execute() removed from stunnel.c file? "hwnd" link error.
by Bao, Robert 06 Dec '12

06 Dec '12

Came across another Win CE build issue in the current stunnel 4.54 version. Got link error for main_execute() referenced in nogui.c file. I noticed that the implementation of "main_execute()" was in stunnel.c file in old versions, but is not there anymore. Also got "hwnd" linking issue. Looks like "hwnd" is initialized/created in gui.c file, and used in log.c/client.c/option.c files. It is not initialized/created in nogui.c file. I am using the NOGUIOBJS/tstunnel.exe option in building the stunnel, and got this linking error. Any suggestions on how to fix these or work around them? Thanks. Robert Bao Software House Tyco International 978-577-4202 Explore our new Tyco Online Learning Center Web-based Training Bundles at: www.swhouse.com/support/tyco_online_learning_center.aspx This e-mail may contain or have attached to it information or technology the export or re-export of which is restricted by U.S. laws and regulations. By viewing this e-mail and any attachments, the recipient agrees to the following: (i) the recipients use of the contents of this e-mail and any attachments shall comply with all applicable laws, rules and regulations, including, without limitation, U.S. international trade laws and regulations, and (ii) the recipient may not transfer or otherwise export or re-export any information or technology contained in this e-mail or any attachment except in full compliance with the export controls administered by the U.S. and other countries and any applicable import and use restrictions.

3 12

Console-only version for Windows
by Clodo 03 Dec '12

03 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is a binary version of stunnel for Windows WITHOUT the gui, console/terminal only? I have some different problems with the GUI edition: - - Fail to read filename with spaces? - - If is already in execution and i run stunnel.exe with some other parameters, they are ignored and simply give the focus to the current instance, so issue with launching multiple instances. Why there isn't any console-only version, exacly like the standard linux distribution? The Cygwin version works great, but isn't portable, doesn't work without Cygwin environment. There are some big trouble about that, or simply doesn't exists the .mak project file? I'm also available to pay with a donation a build like that. I'm waiting for feedback. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQEVAwUBUKPN8i/ixHrG0m4LAQLxdwf/RF1faK3tksXnl6qm8Bi6HIFaG72tmFMJ LwQuY0gJh7rYDJs3NUQwh4XczMqi+5a8/SRZFojSewI2WfeZgLuXC58iq5nkAULm quaEN5ynjen80RJ7MtGg9weoHcpV1kug5HKJUwYZLU0lp8CvEGNhl8sgGT/bCUS7 gzdfi1d3YohBbEn8XZZgmmUmp1oShY4dh47Sd4vVlzaL3WkxqNIasCJJCwWk7lUz dPuy8XCi6y+Aes1T2SF87GAwvdkr0FbPiN0GcCXGczZxNjOiGNGOwqaHnxDknibr kHoGU/vv1PKWU5AYGiryD/YiUt0nHC/7I7IKU3tFu3smmFR8BTOwKA== =lLyE -----END PGP SIGNATURE-----

4 5

Patch to fix: Wildcard SSL certificates + SNI broken on Firefox
by Stephen Balukoff 28 Nov '12

28 Nov '12

Hello! I noticed that when dealing with wildcard certs in stunnel where an SNI configuration is being used, unless a specific servername context that exactly matches the browser's requested servername is in the stunnel.conf, stunnel responds to the client (web browser in this case) with a SSL_TLSEXT_ERR_ALERT_FATAL. Most browsers fall back to a non-SNI request, at which point, stunnel responds with whatever the master service's certificate is (which, if it's a wildcard cert, just works). However, at least one popularly-used web browser (Firefox) does not do this, and instead returns an error message to the user which they cannot (and should not need to) override to view the site contents. Since it's impractical to list all the possible servernames that can match at wildcard cert, and it's also impractical to expect the Firefox developers to change the behavior of their browser (when they shouldn't have to), and even more impractical to expect all the current users of Firefox to upgrade in a timely manner... I went ahead and wrote a patch for stunnel which instructs it to look for a matching wildcard certificate, if an exactly-matching servername isn't found. I've attached this patch to this message. Beyond fixing the stunnel+wildcard cert+SNI+firefox problem above, the secondary benefits of this patch are: * stunnel now responds immediately with a matching cert in the case of a wildcard cert, thus eliminating that first exchange which results in the SSL_TLSEXT_ERR_ALERT_FATAL error above. For stupid browsers and configurations with keepalive turned off + lots of requests per page and high latency, this should help to significantly improve performance. * stunnel will still choose an exactly matching cert if it's available and configured. (ie. if the browser requests 'subdomain.example.com', and there's a certificate configured in stunnel for 'subdomain.example.com' and another for '*.example.com', stunnel will respond with the ' subdomain.example.com' cert.) * one can now use multiple wildcard certs on a single IP:Port combination thanks to SNI. (Without this patch, you can effectively only use one wildcard cert per IP:Port combination with stunnel.) One note: It's been years since I've written any C code, so can't really vouch for the quality of my patch. I'm hoping at least the maintainers of this project see the utility of the patch I'm providing and write something similar in non-stupid C. Thanks, Stephen -- Stephen Balukoff Blue Box Group, LLC (800)613-4305 x807

1 0

Question : prevent close-nofity alerts from stunnel-server
by bhakta79 28 Nov '12

28 Nov '12

Hello, I was trying MITM on a windows application (which talks to a M$ server). Stunnel was running on my windows xp machine. windows-client-app -> stunnel server ---> stunnel client --> M$ Server What I found is that stunnel server sends close notify alert to the windows client app which causes the client to suspend all further communication (busted windows-client of course!). I tried setting the TimeoutClose option to high values but I always saw the server sending close notify alert (is the timeout close only a client-side parameter?) Is there a way to configure server to not send close notify? stullen logs: 2012.11.28 18:32:12 LOG7[3908:5904]: SSL socket closed on SSL_read 2012.11.28 18:32:12 LOG7[3908:5904]: Sent socket write shutdown 2012.11.28 18:32:12 LOG7[3908:4232]: Socket closed on read 2012.11.28 18:32:12 LOG5[3908:5904]: Connection closed: 901 byte(s) sent to SSL, 38020 byte(s) sent to socket 2012.11.28 18:32:12 LOG7[3908:4232]: Sending close_notify alert 2012.11.28 18:32:12 LOG7[3908:4232]: SSL alert (write): warning: close notify 2012.11.28 18:32:12 LOG6[3908:4232]: SSL_shutdown successfully sent close_notify alert 2012.11.28 18:32:12 LOG7[3908:5904]: Remote socket (FD=356) closed <mailto:[email protected]> I finally ended up making this one line code-change to stop server from sending close alert that helped my MITM progress. src/client.c: if(!(SSL_get_shutdown(c->ssl)&SSL_SENT_SHUTDOWN) && !sock_open_rd && !c->sock_ptr) { s_log(LOG_DEBUG, "BHAKTA - HACK -> Skip Sending close_notify alert"); *! if(0 && SSL_version(c->ssl)!=SSL2_VERSION) { /* SSLv3, TLSv1 */* s_log(LOG_DEBUG, "Sending close_notify alert"); shutdown_wants_write=1; } else { /* no alerts in SSLv2, including the close_notify alert */ s_log(LOG_DEBUG, "Closing SSLv2 socket"); if(c->ssl_rfd->is_socket) shutdown(c->ssl_rfd->fd, SHUT_RD); /* notify the kernel */ if(c->ssl_wfd->is_socket) shutdown(c->ssl_wfd->fd, SHUT_WR); /* send TCP FIN */ /* notify the OpenSSL library */ SSL_set_shutdown(c->ssl, SSL_SENT_SHUTDOWN|SSL_RECEIVED_SHUTDOWN); } } Is there a way to prevent server from sending close notify alert by means of stunel.conf parameters? stunnel.conf: debug = 7 output = stunnel.log cert = fakecert.pem key = fakecert.key options = DONT_INSERT_EMPTY_FRAGMENTS socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 [https] sslVersion = TLSv1 accept = 0.0.0.0:443 connect = 127.0.0.1:446 [https-client] client = yes sslVersion = TLSv1 accept = 127.0.0.1:446 connect = 172.24.244.11:443 TIMEOUTclose = 300

1 0

Re: [stunnel-users] WinCE link errors
by Bao, Robert 28 Nov '12

28 Nov '12

Brian, You are right. After changing the order, all wcecompatex.lib related link errors are gone! Thanks a lot. Also thank Pierre for dropping me another suggestion. Mike, When you get chance to update next time, you may consider changing this line (in evc.mak): From: LIBS=/NODEFAULTLIB coredll.lib corelibc.lib winsock.lib wcecompatex.lib libeay32.lib ssleay32.lib To: LIBS=/NODEFAULTLIB winsock.lib wcecompatex.lib libeay32.lib ssleay32.lib coredll.lib corelibc.lib Thank you all. Robert From: Brian Wilkins [mailto:[email protected]] Sent: Wednesday, November 28, 2012 5:15 PM To: Bao, Robert Subject: Re: [stunnel-users] WinCE link errors Maybe try changing the link order...? On Nov 28, 2012 5:10 PM, "Bao, Robert" <rbao(a)tycoint.com> wrote: Dear Mike and WinCE stunnel users out there, I am currently in the process of compiling/linking the latest stunnel (4.54) for our ARM and WinCE 5.0 based device. I noticed that this version requires coredll.lib and corelibc.lib in the final link process (defined in the LIBS variable), which the old ones (e.g., version 4.33) didn't. Anyway, I got a lot of linking errors (see below), and just wondering any of you have seen the same errors and how you get around with these errors. If you have any other suggestions please feel free to let me know too. Note: I could resolve the errors at the bottom, but I have trouble get rid of the errors relating to wcecompatex.lib(redir.obj). Thank you for your time. wcecompatex.lib(redir.obj) : error LNK2005: fopen already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fclose already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fread already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fwrite already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: _getstdfilex already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: _fileno already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fflush already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: feof already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: ferror already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: clearerr already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fseek already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: ftell already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: _setmode already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fgets already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fprintf already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : warning LNK4006: fopen already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fclose already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fread already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fwrite already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: _getstdfilex already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: _fileno already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fflush already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: feof already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: ferror already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: clearerr already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fseek already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: ftell already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: _setmode already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fgets already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fprintf already defined in coredll.lib(COREDLL.dll); second definition ignored Creating library ..\bin\ARMV4I\tstunnel.lib and object ..\bin\ARMV4I\tstunnel.exp options.obj : error LNK2001: unresolved external symbol WSAGetLastError network.obj : error LNK2001: unresolved external symbol WSAGetLastError stunnel.obj : error LNK2019: unresolved external symbol WSAGetLastError referenced in function daemon_loop ctx.obj : error LNK2001: unresolved external symbol WSAGetLastError client.obj : error LNK2019: unresolved external symbol WSAGetLastError referenced in function init_remote log.obj : error LNK2001: unresolved external symbol WSAGetLastError client.obj : error LNK2019: unresolved external symbol hwnd referenced in function win_new_chain log.obj : error LNK2019: unresolved external symbol hwnd referenced in function s_strerror options.obj : error LNK2001: unresolved external symbol hwnd log.obj : error LNK2019: unresolved external symbol WSASetLastError referenced in function s_log nogui.obj : error LNK2019: unresolved external symbol main_execute referenced in function main ..\bin\ARMV4I\tstunnel.exe : fatal error LNK1120: 4 unresolved externals NMAKE : fatal error U1077: 'link' : return code '0x460' Robert Bao Software House Tyco International 978-577-4202 Explore our new Tyco Online Learning Center Web-based Training Bundles at: www.swhouse.com/support/tyco_online_learning_center.aspx This e-mail may contain or have attached to it information or technology the export or re-export of which is restricted by U.S. laws and regulations. By viewing this e-mail and any attachments, the recipient agrees to the following: (i) the recipients use of the contents of this e-mail and any attachments shall comply with all applicable laws, rules and regulations, including, without limitation, U.S. international trade laws and regulations, and (ii) the recipient may not transfer or otherwise export or re-export any information or technology contained in this e-mail or any attachment except in full compliance with the export controls administered by the U.S. and other countries and any applicable import and use restrictions. _______________________________________________ stunnel-users mailing list stunnel-users(a)stunnel.org https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

1 0

WinCE link errors
by Bao, Robert 28 Nov '12

28 Nov '12

Dear Mike and WinCE stunnel users out there, I am currently in the process of compiling/linking the latest stunnel (4.54) for our ARM and WinCE 5.0 based device. I noticed that this version requires coredll.lib and corelibc.lib in the final link process (defined in the LIBS variable), which the old ones (e.g., version 4.33) didn't. Anyway, I got a lot of linking errors (see below), and just wondering any of you have seen the same errors and how you get around with these errors. If you have any other suggestions please feel free to let me know too. Note: I could resolve the errors at the bottom, but I have trouble get rid of the errors relating to wcecompatex.lib(redir.obj). Thank you for your time. wcecompatex.lib(redir.obj) : error LNK2005: fopen already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fclose already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fread already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fwrite already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: _getstdfilex already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: _fileno already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fflush already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: feof already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: ferror already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: clearerr already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fseek already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: ftell already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: _setmode already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fgets already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : error LNK2005: fprintf already defined in coredll.lib(COREDLL.dll) wcecompatex.lib(redir.obj) : warning LNK4006: fopen already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fclose already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fread already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fwrite already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: _getstdfilex already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: _fileno already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fflush already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: feof already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: ferror already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: clearerr already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fseek already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: ftell already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: _setmode already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fgets already defined in coredll.lib(COREDLL.dll); second definition ignored wcecompatex.lib(redir.obj) : warning LNK4006: fprintf already defined in coredll.lib(COREDLL.dll); second definition ignored Creating library ..\bin\ARMV4I\tstunnel.lib and object ..\bin\ARMV4I\tstunnel.exp options.obj : error LNK2001: unresolved external symbol WSAGetLastError network.obj : error LNK2001: unresolved external symbol WSAGetLastError stunnel.obj : error LNK2019: unresolved external symbol WSAGetLastError referenced in function daemon_loop ctx.obj : error LNK2001: unresolved external symbol WSAGetLastError client.obj : error LNK2019: unresolved external symbol WSAGetLastError referenced in function init_remote log.obj : error LNK2001: unresolved external symbol WSAGetLastError client.obj : error LNK2019: unresolved external symbol hwnd referenced in function win_new_chain log.obj : error LNK2019: unresolved external symbol hwnd referenced in function s_strerror options.obj : error LNK2001: unresolved external symbol hwnd log.obj : error LNK2019: unresolved external symbol WSASetLastError referenced in function s_log nogui.obj : error LNK2019: unresolved external symbol main_execute referenced in function main ..\bin\ARMV4I\tstunnel.exe : fatal error LNK1120: 4 unresolved externals NMAKE : fatal error U1077: 'link' : return code '0x460' Robert Bao Software House Tyco International 978-577-4202 Explore our new Tyco Online Learning Center Web-based Training Bundles at: www.swhouse.com/support/tyco_online_learning_center.aspx This e-mail may contain or have attached to it information or technology the export or re-export of which is restricted by U.S. laws and regulations. By viewing this e-mail and any attachments, the recipient agrees to the following: (i) the recipients use of the contents of this e-mail and any attachments shall comply with all applicable laws, rules and regulations, including, without limitation, U.S. international trade laws and regulations, and (ii) the recipient may not transfer or otherwise export or re-export any information or technology contained in this e-mail or any attachment except in full compliance with the export controls administered by the U.S. and other countries and any applicable import and use restrictions.

2 1

equivalent to SSLHonorcipherorder in stunnel?
by Mehdi Bennani 28 Nov '12

28 Nov '12

Hi, I was wondering if there were a flag available in stunnel, that would be the equivalent of the Apache directive 'SSLHonorcipherorder' ? I would like to basically be able to 'force' server preferences, rather then client ones, during cipher negotiation SSL handshake. Thank you, Elextra-

2 1