Hi there,
After upgrading to stunnel 5.07 I've seen a lot of truncated http responses. I've tested different
versions and 5.04 is the last one to work fine. There seems to be fixes to a similar issue in 5.05,
but at least for me the result seems to be the opposite. I'm on Ubuntu 12.04.
Looking at the logs, the log entries are identical except for one part, the amount of data sent to SSL:
stunnel >= 5.05, not working:
LOG3[31153]: transfer: s_poll_wait: TIMEOUTclose exceeded: closing
LOG5[31153]: Connection closed: 67584 byte(s) sent to SSL, 184 byte(s) sent to socket
stunnel 5.04, works:
LOG3[6248]: transfer: s_poll_wait: TIMEOUTclose exceeded: closing
LOG5[6248]: Connection closed: 113051 byte(s) sent to SSL, 184 byte(s) sent to socket
It's worth noting that in both cases the closing happens after TIMEOUTclose has exceeded (probably
because of a missing close notify?).
In any case, apparently less data is sent to SSL and that's how it seems like; the end of the http
responses get truncated. If everything's very fast (e.g. localhost connections only) the problem
seems not to happen, not very often at least. With connections between two servers I've been able to
reproduce it pretty much every time in my setup (stunnel -> haproxy -> apache -> unicorn).
Undefining the POLLRDHUP or reverting the changes in 5.05 to src/client.c seem to fix the problem
for me.
Any ideas what would be a proper fix?
Thanks!
Best regards,
Tuomas Silen
