I am faling to connect to gmail. Not sure what that bind error means.
iqbala@ghar:~$ sudo stunnel4
2008.12.15 13:53:17 LOG7[3839:3083650736]: Snagged 64 random bytes
from /home/iqbala/.rnd
2008.12.15 13:53:17 LOG7[3839:3083650736]: Wrote 1024 new random bytes
to /home/iqbala/.rnd
2008.12.15 13:53:17 LOG7[3839:3083650736]: RAND_status claims
sufficient entropy for the PRNG
2008.12.15 13:53:17 LOG7[3839:3083650736]: PRNG seeded successfully
2008.12.15 13:53:17 LOG7[3839:3083650736]: Certificate: /etc/stunnel/stunnel.pem
2008.12.15 13:53:17 LOG7[3839:3083650736]: Certificate loaded
2008.12.15 13:53:17 LOG7[3839:3083650736]: Key file: /etc/stunnel/stunnel.pem
2008.12.15 13:53:17 LOG7[3839:3083650736]: Private key loaded
2008.12.15 13:53:17 LOG7[3839:3083650736]: SSL context initialized for
service ssmtp
2008.12.15 13:53:17 LOG5[3839:3083650736]: stunnel 4.22 on
i486-pc-linux-gnu with OpenSSL 0.9.8g 19 Oct 2007
2008.12.15 13:53:17 LOG5[3839:3083650736]: Threading:PTHREAD
SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
2008.12.15 13:53:17 LOG6[3839:3083650736]: file ulimit = 1024 (can be
changed with 'ulimit -n')
2008.12.15 13:53:17 LOG6[3839:3083650736]: poll() used - no FD_SETSIZE
limit for file descriptors
2008.12.15 13:53:17 LOG5[3839:3083650736]: 500 clients allowed
2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 10 in non-blocking mode
2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 11 in non-blocking mode
2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 12 in non-blocking mode
2008.12.15 13:53:17 LOG7[3839:3083650736]: SO_REUSEADDR option set on
accept socket
2008.12.15 13:53:17 LOG3[3839:3083650736]: Error binding ssmtp to
74.125.93.111:587
2008.12.15 13:53:17 LOG3[3839:3083650736]: bind: Cannot assign
requested address (99)
Here is how my conf file looks like
iqbala@ghar:~$ cat /etc/stunnel/stunnel.conf | egrep -v "^;|^$"
cert = /etc/stunnel/stunnel.pem
foreground = yes
sslVersion = SSLv3
chroot = /var/lib/stunnel4/
setuid = stunnel4
setgid = stunnel4
pid = /stunnel4.pid
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
debug = 7
output = /var/log/stunnel4/stunnel.log
client = yes
[ssmtp]
accept = smtp.gmail.com:587
connect = 25
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
5
9
Hi all,
To make "Stunnel 5.31" work with Gmail, I have to go in security settings
of Gmail and "allow less secure apps to access my account".
Is it mandatory ?
Is it possible to set Stunnel to access Gmail without lowering it security
level ?
How ?
I checked in log file TLS v1.2 is used by Stunnel but Gmail still consider
it as a "less secure app." !
Regards,
Steve
2
1
I had my stunnel instance working as expected last week. Since then I've
moved the server behind a load balancer, which is doing regular health
checks (opens a tcp connection, then disconnects) to see that stunnel is
up. I don't believe the health checks are a problem, but they're the only
change I've made since I had stunnel working.
I can see the health checks connecting and disconnecting. However when I
open a new connection, either by telnet or by:
openssl s_client -connect mtar.uwo.ca:587 -starttls smtp
... stunnel says it fails to verify the server certificate, then seg faults.
I'm running stunnel 5.40 and I'm having the same problem on 2 different
servers running openssl 1.1.0d and 1.1.0e.
Here's my config:
[root@mtar1 stunnel]# egrep -v '^;|^ *$' stunnel.conf
; Sample stunnel configuration file for Unix by Michal Trojnara 2002-2017
setuid = stunnel
setgid = stunnel
pid = /usr/local/var/run/stunnel/stunnel.pid
foreground = yes
debug = debug
[uwo2local]
accept = 587
cert = /usr/local/etc/stunnel/mtar-withprivatekey.pem
connect = 20587
protocol = smtp
[local2o365]
client = yes
accept = 127.0.0.1:20587
connect = smtp.office365.com:587
checkHost = smtp.office365.com
verifyChain = yes
CApath = /etc/ssl/certs
OCSPaia = yes
protocol = smtp
Here's my debug log:
The health checks are from 172.18.58.5 and my test connection which leads
to the seg fault is from 129.100.6.17.
[root@mtar1 stunnel]# /usr/local/bin/stunnel
/usr/local/etc/stunnel/stunnel.conf
2017.02.23 11:28:48 LOG7[ui]: Clients allowed=500
2017.02.23 11:28:48 LOG5[ui]: stunnel 5.40 on x86_64-unknown-linux-gnu
platform
2017.02.23 11:28:48 LOG5[ui]: Compiled/running with OpenSSL 1.1.0d 26 Jan
2017
2017.02.23 11:28:48 LOG5[ui]: Threading:PTHREAD Sockets:POLL,IPv6
TLS:ENGINE,FIPS,OCSP,PSK,SNI
2017.02.23 11:28:48 LOG7[ui]: errno: (*__errno_location ())
2017.02.23 11:28:48 LOG5[ui]: Reading configuration from file
/usr/local/etc/stunnel/stunnel.conf
2017.02.23 11:28:48 LOG5[ui]: UTF-8 byte order mark detected
2017.02.23 11:28:48 LOG5[ui]: FIPS mode disabled
2017.02.23 11:28:48 LOG7[ui]: Compression disabled
2017.02.23 11:28:48 LOG7[ui]: PRNG seeded successfully
2017.02.23 11:28:48 LOG7[cron]: Cron thread initialized
2017.02.23 11:28:48 LOG6[ui]: Initializing service [uwo2local]
2017.02.23 11:28:48 LOG7[ui]: Ciphers: HIGH:!DH:!aNULL:!SSLv2
2017.02.23 11:28:48 LOG7[ui]: TLS options: 0x02020004 (+0x02000000,
-0x00000000)
2017.02.23 11:28:48 LOG6[ui]: Loading certificate from file:
/usr/local/etc/stunnel/mtar-withprivatekey.pem
2017.02.23 11:28:48 LOG6[ui]: Certificate loaded from file:
/usr/local/etc/stunnel/mtar-withprivatekey.pem
2017.02.23 11:28:48 LOG6[ui]: Loading private key from file:
/usr/local/etc/stunnel/mtar-withprivatekey.pem
2017.02.23 11:28:48 LOG6[ui]: Private key loaded from file:
/usr/local/etc/stunnel/mtar-withprivatekey.pem
2017.02.23 11:28:48 LOG7[ui]: Private key check succeeded
2017.02.23 11:28:48 LOG7[ui]: DH initialization
2017.02.23 11:28:48 LOG7[ui]: Could not load DH parameters from
/usr/local/etc/stunnel/mtar-withprivatekey.pem
2017.02.23 11:28:48 LOG6[ui]: Using dynamic DH parameters
2017.02.23 11:28:48 LOG7[ui]: ECDH initialization
2017.02.23 11:28:48 LOG7[ui]: ECDH initialized with curve prime256v1
2017.02.23 11:28:48 LOG6[ui]: Initializing service [local2o365]
2017.02.23 11:28:48 LOG7[ui]: Ciphers: HIGH:!DH:!aNULL:!SSLv2
2017.02.23 11:28:48 LOG7[ui]: TLS options: 0x02020004 (+0x02000000,
-0x00000000)
2017.02.23 11:28:48 LOG7[ui]: No certificate or private key specified
2017.02.23 11:28:48 LOG5[ui]: Configuration successful
2017.02.23 11:28:48 LOG7[ui]: Listening file descriptor created (FD=7)
2017.02.23 11:28:48 LOG7[ui]: Option SO_REUSEADDR set on accept socket
2017.02.23 11:28:48 LOG7[ui]: Service [uwo2local] (FD=7) bound to
0.0.0.0:587
2017.02.23 11:28:48 LOG7[ui]: Listening file descriptor created (FD=8)
2017.02.23 11:28:48 LOG7[ui]: Option SO_REUSEADDR set on accept socket
2017.02.23 11:28:48 LOG7[ui]: Service [local2o365] (FD=8) bound to
127.0.0.1:20587
2017.02.23 11:28:48 LOG6[cron]: Executing cron jobs
2017.02.23 11:28:48 LOG5[cron]: Updating DH parameters
2017.02.23 11:28:48 LOG7[ui]: Created pid file
/usr/local/var/run/stunnel/stunnel.pid
2017.02.23 11:28:51 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:28:51 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:28:51 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:28:51 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:28:51 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:40161
2017.02.23 11:28:51 LOG7[0]: Service [uwo2local] started
2017.02.23 11:28:51 LOG7[0]: Option TCP_NODELAY set on local socket
2017.02.23 11:28:51 LOG5[0]: Service [uwo2local] accepted connection from
172.18.58.5:40161
2017.02.23 11:28:51 LOG6[0]: failover: round-robin, starting at entry #0
2017.02.23 11:28:51 LOG6[0]: s_connect: connecting ::1:20587
2017.02.23 11:28:51 LOG7[0]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:28:51 LOG3[0]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:28:51 LOG6[0]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:28:51 LOG7[0]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:28:51 LOG5[0]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:28:51 LOG5[0]: Service [uwo2local] connected remote server
from 127.0.0.1:33132
2017.02.23 11:28:51 LOG7[0]: Option TCP_NODELAY set on remote socket
2017.02.23 11:28:51 LOG7[0]: Remote descriptor (FD=9) initialized
2017.02.23 11:28:51 LOG7[0]: RFC 2487 not detected
2017.02.23 11:28:51 LOG6[0]: Peer certificate not required
2017.02.23 11:28:51 LOG7[0]: TLS state (accept): before SSL initialization
2017.02.23 11:28:51 LOG3[0]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:28:51 LOG5[0]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:28:51 LOG7[0]: Remote descriptor (FD=9) closed
2017.02.23 11:28:51 LOG7[0]: Local descriptor (FD=3) closed
2017.02.23 11:28:51 LOG7[0]: Service [uwo2local] finished (0 left)
2017.02.23 11:28:51 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:28:51 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:28:51 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:28:51 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:28:51 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33132
2017.02.23 11:28:51 LOG7[1]: Service [local2o365] started
2017.02.23 11:28:51 LOG3[1]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:28:51 LOG5[1]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:28:51 LOG7[1]: Local descriptor (FD=3) closed
2017.02.23 11:28:51 LOG7[1]: Service [local2o365] finished (0 left)
2017.02.23 11:28:56 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:28:56 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:28:56 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:28:56 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:28:56 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:19333
2017.02.23 11:28:56 LOG7[2]: Service [uwo2local] started
2017.02.23 11:28:56 LOG7[2]: Option TCP_NODELAY set on local socket
2017.02.23 11:28:56 LOG5[2]: Service [uwo2local] accepted connection from
172.18.58.5:19333
2017.02.23 11:28:56 LOG6[2]: failover: round-robin, starting at entry #1
2017.02.23 11:28:56 LOG6[2]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:28:56 LOG7[2]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:28:56 LOG5[2]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:28:56 LOG5[2]: Service [uwo2local] connected remote server
from 127.0.0.1:33134
2017.02.23 11:28:56 LOG7[2]: Option TCP_NODELAY set on remote socket
2017.02.23 11:28:56 LOG7[2]: Remote descriptor (FD=9) initialized
2017.02.23 11:28:56 LOG7[2]: RFC 2487 not detected
2017.02.23 11:28:56 LOG6[2]: Peer certificate not required
2017.02.23 11:28:56 LOG7[2]: TLS state (accept): before SSL initialization
2017.02.23 11:28:56 LOG3[2]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:28:56 LOG5[2]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:28:56 LOG7[2]: Remote descriptor (FD=9) closed
2017.02.23 11:28:56 LOG7[2]: Local descriptor (FD=3) closed
2017.02.23 11:28:56 LOG7[2]: Service [uwo2local] finished (0 left)
2017.02.23 11:28:56 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:28:56 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:28:56 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:28:56 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:28:56 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33134
2017.02.23 11:28:56 LOG7[3]: Service [local2o365] started
2017.02.23 11:28:56 LOG3[3]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:28:56 LOG5[3]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:28:56 LOG7[3]: Local descriptor (FD=3) closed
2017.02.23 11:28:56 LOG7[3]: Service [local2o365] finished (0 left)
2017.02.23 11:29:01 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:01 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:01 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:01 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:01 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:46315
2017.02.23 11:29:01 LOG7[4]: Service [uwo2local] started
2017.02.23 11:29:01 LOG7[4]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:01 LOG5[4]: Service [uwo2local] accepted connection from
172.18.58.5:46315
2017.02.23 11:29:01 LOG6[4]: failover: round-robin, starting at entry #0
2017.02.23 11:29:01 LOG6[4]: s_connect: connecting ::1:20587
2017.02.23 11:29:01 LOG7[4]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:29:01 LOG3[4]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:29:01 LOG6[4]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:01 LOG7[4]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:01 LOG5[4]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:01 LOG5[4]: Service [uwo2local] connected remote server
from 127.0.0.1:33138
2017.02.23 11:29:01 LOG7[4]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:01 LOG7[4]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:01 LOG7[4]: RFC 2487 not detected
2017.02.23 11:29:01 LOG6[4]: Peer certificate not required
2017.02.23 11:29:01 LOG7[4]: TLS state (accept): before SSL initialization
2017.02.23 11:29:01 LOG3[4]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:01 LOG5[4]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:01 LOG7[4]: Remote descriptor (FD=9) closed
2017.02.23 11:29:01 LOG7[4]: Local descriptor (FD=3) closed
2017.02.23 11:29:01 LOG7[4]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:01 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:01 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:01 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:01 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:01 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33138
2017.02.23 11:29:01 LOG7[5]: Service [local2o365] started
2017.02.23 11:29:01 LOG3[5]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:01 LOG5[5]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:01 LOG7[5]: Local descriptor (FD=3) closed
2017.02.23 11:29:01 LOG7[5]: Service [local2o365] finished (0 left)
2017.02.23 11:29:06 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:06 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:06 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:06 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:06 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:55003
2017.02.23 11:29:06 LOG7[6]: Service [uwo2local] started
2017.02.23 11:29:06 LOG7[6]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:06 LOG5[6]: Service [uwo2local] accepted connection from
172.18.58.5:55003
2017.02.23 11:29:06 LOG6[6]: failover: round-robin, starting at entry #1
2017.02.23 11:29:06 LOG6[6]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:06 LOG7[6]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:06 LOG5[6]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:06 LOG5[6]: Service [uwo2local] connected remote server
from 127.0.0.1:33140
2017.02.23 11:29:06 LOG7[6]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:06 LOG7[6]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:06 LOG7[6]: RFC 2487 not detected
2017.02.23 11:29:06 LOG6[6]: Peer certificate not required
2017.02.23 11:29:06 LOG7[6]: TLS state (accept): before SSL initialization
2017.02.23 11:29:06 LOG3[6]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:06 LOG5[6]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:06 LOG7[6]: Remote descriptor (FD=9) closed
2017.02.23 11:29:06 LOG7[6]: Local descriptor (FD=3) closed
2017.02.23 11:29:06 LOG7[6]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:06 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:06 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:06 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:06 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:06 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33140
2017.02.23 11:29:06 LOG7[7]: Service [local2o365] started
2017.02.23 11:29:06 LOG3[7]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:06 LOG5[7]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:06 LOG7[7]: Local descriptor (FD=3) closed
2017.02.23 11:29:06 LOG7[7]: Service [local2o365] finished (0 left)
2017.02.23 11:29:11 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:11 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:11 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:11 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:11 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:52586
2017.02.23 11:29:11 LOG7[8]: Service [uwo2local] started
2017.02.23 11:29:11 LOG7[8]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:11 LOG5[8]: Service [uwo2local] accepted connection from
172.18.58.5:52586
2017.02.23 11:29:11 LOG6[8]: failover: round-robin, starting at entry #0
2017.02.23 11:29:11 LOG6[8]: s_connect: connecting ::1:20587
2017.02.23 11:29:11 LOG7[8]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:29:11 LOG3[8]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:29:11 LOG6[8]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:11 LOG7[8]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:11 LOG5[8]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:11 LOG5[8]: Service [uwo2local] connected remote server
from 127.0.0.1:33144
2017.02.23 11:29:11 LOG7[8]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:11 LOG7[8]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:11 LOG7[8]: RFC 2487 not detected
2017.02.23 11:29:11 LOG6[8]: Peer certificate not required
2017.02.23 11:29:11 LOG7[8]: TLS state (accept): before SSL initialization
2017.02.23 11:29:11 LOG3[8]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:11 LOG5[8]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:11 LOG7[8]: Remote descriptor (FD=9) closed
2017.02.23 11:29:11 LOG7[8]: Local descriptor (FD=3) closed
2017.02.23 11:29:11 LOG7[8]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:11 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:11 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:11 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:11 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:11 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33144
2017.02.23 11:29:11 LOG7[9]: Service [local2o365] started
2017.02.23 11:29:11 LOG3[9]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:11 LOG5[9]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:11 LOG7[9]: Local descriptor (FD=3) closed
2017.02.23 11:29:11 LOG7[9]: Service [local2o365] finished (0 left)
2017.02.23 11:29:16 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:16 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:16 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:16 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:16 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:60425
2017.02.23 11:29:16 LOG7[10]: Service [uwo2local] started
2017.02.23 11:29:16 LOG7[10]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:16 LOG5[10]: Service [uwo2local] accepted connection from
172.18.58.5:60425
2017.02.23 11:29:16 LOG6[10]: failover: round-robin, starting at entry #1
2017.02.23 11:29:16 LOG6[10]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:16 LOG7[10]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:16 LOG5[10]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:16 LOG5[10]: Service [uwo2local] connected remote server
from 127.0.0.1:33146
2017.02.23 11:29:16 LOG7[10]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:16 LOG7[10]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:16 LOG7[10]: RFC 2487 not detected
2017.02.23 11:29:16 LOG6[10]: Peer certificate not required
2017.02.23 11:29:16 LOG7[10]: TLS state (accept): before SSL initialization
2017.02.23 11:29:16 LOG3[10]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:16 LOG5[10]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:16 LOG7[10]: Remote descriptor (FD=9) closed
2017.02.23 11:29:16 LOG7[10]: Local descriptor (FD=3) closed
2017.02.23 11:29:16 LOG7[10]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:16 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:16 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:16 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:16 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:16 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33146
2017.02.23 11:29:16 LOG7[11]: Service [local2o365] started
2017.02.23 11:29:16 LOG3[11]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:16 LOG5[11]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:16 LOG7[11]: Local descriptor (FD=3) closed
2017.02.23 11:29:16 LOG7[11]: Service [local2o365] finished (0 left)
2017.02.23 11:29:21 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:21 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:21 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:21 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:21 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:50381
2017.02.23 11:29:21 LOG7[12]: Service [uwo2local] started
2017.02.23 11:29:21 LOG7[12]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:21 LOG5[12]: Service [uwo2local] accepted connection from
172.18.58.5:50381
2017.02.23 11:29:21 LOG6[12]: failover: round-robin, starting at entry #0
2017.02.23 11:29:21 LOG6[12]: s_connect: connecting ::1:20587
2017.02.23 11:29:21 LOG7[12]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:29:21 LOG3[12]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:29:21 LOG6[12]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:21 LOG7[12]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:21 LOG5[12]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:21 LOG5[12]: Service [uwo2local] connected remote server
from 127.0.0.1:33150
2017.02.23 11:29:21 LOG7[12]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:21 LOG7[12]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:21 LOG7[12]: RFC 2487 not detected
2017.02.23 11:29:21 LOG6[12]: Peer certificate not required
2017.02.23 11:29:21 LOG7[12]: TLS state (accept): before SSL initialization
2017.02.23 11:29:21 LOG3[12]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:21 LOG5[12]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:21 LOG7[12]: Remote descriptor (FD=9) closed
2017.02.23 11:29:21 LOG7[12]: Local descriptor (FD=3) closed
2017.02.23 11:29:21 LOG7[12]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:21 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:21 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:21 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:21 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:21 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33150
2017.02.23 11:29:21 LOG7[13]: Service [local2o365] started
2017.02.23 11:29:21 LOG3[13]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:21 LOG5[13]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:21 LOG7[13]: Local descriptor (FD=3) closed
2017.02.23 11:29:21 LOG7[13]: Service [local2o365] finished (0 left)
2017.02.23 11:29:26 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:26 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:26 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:26 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:26 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:7384
2017.02.23 11:29:26 LOG7[14]: Service [uwo2local] started
2017.02.23 11:29:26 LOG7[14]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:26 LOG5[14]: Service [uwo2local] accepted connection from
172.18.58.5:7384
2017.02.23 11:29:26 LOG6[14]: failover: round-robin, starting at entry #1
2017.02.23 11:29:26 LOG6[14]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:26 LOG7[14]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:26 LOG5[14]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:26 LOG5[14]: Service [uwo2local] connected remote server
from 127.0.0.1:33152
2017.02.23 11:29:26 LOG7[14]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:26 LOG7[14]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:26 LOG7[14]: RFC 2487 not detected
2017.02.23 11:29:26 LOG6[14]: Peer certificate not required
2017.02.23 11:29:26 LOG7[14]: TLS state (accept): before SSL initialization
2017.02.23 11:29:26 LOG3[14]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:26 LOG5[14]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:26 LOG7[14]: Remote descriptor (FD=9) closed
2017.02.23 11:29:26 LOG7[14]: Local descriptor (FD=3) closed
2017.02.23 11:29:26 LOG7[14]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:26 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:26 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:26 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:26 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:26 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33152
2017.02.23 11:29:26 LOG7[15]: Service [local2o365] started
2017.02.23 11:29:26 LOG3[15]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:26 LOG5[15]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:26 LOG7[15]: Local descriptor (FD=3) closed
2017.02.23 11:29:26 LOG7[15]: Service [local2o365] finished (0 left)
2017.02.23 11:29:31 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:31 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:31 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:31 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:31 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:40920
2017.02.23 11:29:31 LOG7[16]: Service [uwo2local] started
2017.02.23 11:29:31 LOG7[16]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:31 LOG5[16]: Service [uwo2local] accepted connection from
172.18.58.5:40920
2017.02.23 11:29:31 LOG6[16]: failover: round-robin, starting at entry #0
2017.02.23 11:29:31 LOG6[16]: s_connect: connecting ::1:20587
2017.02.23 11:29:31 LOG7[16]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:29:31 LOG3[16]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:29:31 LOG6[16]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:31 LOG7[16]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:31 LOG5[16]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:31 LOG5[16]: Service [uwo2local] connected remote server
from 127.0.0.1:33156
2017.02.23 11:29:31 LOG7[16]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:31 LOG7[16]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:31 LOG7[16]: RFC 2487 not detected
2017.02.23 11:29:31 LOG6[16]: Peer certificate not required
2017.02.23 11:29:31 LOG7[16]: TLS state (accept): before SSL initialization
2017.02.23 11:29:31 LOG3[16]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:31 LOG5[16]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:31 LOG7[16]: Remote descriptor (FD=9) closed
2017.02.23 11:29:31 LOG7[16]: Local descriptor (FD=3) closed
2017.02.23 11:29:31 LOG7[16]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:31 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:31 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:31 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:31 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:31 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33156
2017.02.23 11:29:31 LOG7[17]: Service [local2o365] started
2017.02.23 11:29:31 LOG3[17]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:31 LOG5[17]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:31 LOG7[17]: Local descriptor (FD=3) closed
2017.02.23 11:29:31 LOG7[17]: Service [local2o365] finished (0 left)
2017.02.23 11:29:36 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:36 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:36 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:36 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:36 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:23632
2017.02.23 11:29:36 LOG7[18]: Service [uwo2local] started
2017.02.23 11:29:36 LOG7[18]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:36 LOG5[18]: Service [uwo2local] accepted connection from
172.18.58.5:23632
2017.02.23 11:29:36 LOG6[18]: failover: round-robin, starting at entry #1
2017.02.23 11:29:36 LOG6[18]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:36 LOG7[18]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:36 LOG5[18]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:36 LOG5[18]: Service [uwo2local] connected remote server
from 127.0.0.1:33158
2017.02.23 11:29:36 LOG7[18]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:36 LOG7[18]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:36 LOG7[18]: RFC 2487 not detected
2017.02.23 11:29:36 LOG6[18]: Peer certificate not required
2017.02.23 11:29:36 LOG7[18]: TLS state (accept): before SSL initialization
2017.02.23 11:29:36 LOG3[18]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:36 LOG5[18]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:36 LOG7[18]: Remote descriptor (FD=9) closed
2017.02.23 11:29:36 LOG7[18]: Local descriptor (FD=3) closed
2017.02.23 11:29:36 LOG7[18]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:36 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:36 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:36 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:36 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:36 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33158
2017.02.23 11:29:36 LOG7[19]: Service [local2o365] started
2017.02.23 11:29:36 LOG3[19]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:36 LOG5[19]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:36 LOG7[19]: Local descriptor (FD=3) closed
2017.02.23 11:29:36 LOG7[19]: Service [local2o365] finished (0 left)
2017.02.23 11:29:41 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:41 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:41 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:41 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:41 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:2134
2017.02.23 11:29:41 LOG7[20]: Service [uwo2local] started
2017.02.23 11:29:41 LOG7[20]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:41 LOG5[20]: Service [uwo2local] accepted connection from
172.18.58.5:2134
2017.02.23 11:29:41 LOG6[20]: failover: round-robin, starting at entry #0
2017.02.23 11:29:41 LOG6[20]: s_connect: connecting ::1:20587
2017.02.23 11:29:41 LOG7[20]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:29:41 LOG3[20]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:29:41 LOG6[20]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:41 LOG7[20]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:41 LOG5[20]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:41 LOG5[20]: Service [uwo2local] connected remote server
from 127.0.0.1:33162
2017.02.23 11:29:41 LOG7[20]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:41 LOG7[20]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:41 LOG7[20]: RFC 2487 not detected
2017.02.23 11:29:41 LOG6[20]: Peer certificate not required
2017.02.23 11:29:41 LOG7[20]: TLS state (accept): before SSL initialization
2017.02.23 11:29:41 LOG3[20]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:41 LOG5[20]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:41 LOG7[20]: Remote descriptor (FD=9) closed
2017.02.23 11:29:41 LOG7[20]: Local descriptor (FD=3) closed
2017.02.23 11:29:41 LOG7[20]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:41 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:41 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:41 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:41 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:41 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33162
2017.02.23 11:29:41 LOG7[21]: Service [local2o365] started
2017.02.23 11:29:41 LOG3[21]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:41 LOG5[21]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:41 LOG7[21]: Local descriptor (FD=3) closed
2017.02.23 11:29:41 LOG7[21]: Service [local2o365] finished (0 left)
2017.02.23 11:29:46 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:46 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:46 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:46 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:46 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:4464
2017.02.23 11:29:46 LOG7[22]: Service [uwo2local] started
2017.02.23 11:29:46 LOG7[22]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:46 LOG5[22]: Service [uwo2local] accepted connection from
172.18.58.5:4464
2017.02.23 11:29:46 LOG6[22]: failover: round-robin, starting at entry #1
2017.02.23 11:29:46 LOG6[22]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:46 LOG7[22]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:46 LOG5[22]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:46 LOG5[22]: Service [uwo2local] connected remote server
from 127.0.0.1:33164
2017.02.23 11:29:46 LOG7[22]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:46 LOG7[22]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:46 LOG7[22]: RFC 2487 not detected
2017.02.23 11:29:46 LOG6[22]: Peer certificate not required
2017.02.23 11:29:46 LOG7[22]: TLS state (accept): before SSL initialization
2017.02.23 11:29:46 LOG3[22]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:46 LOG5[22]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:46 LOG7[22]: Remote descriptor (FD=9) closed
2017.02.23 11:29:46 LOG7[22]: Local descriptor (FD=3) closed
2017.02.23 11:29:46 LOG7[22]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:46 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:46 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:46 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:46 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:46 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33164
2017.02.23 11:29:46 LOG7[23]: Service [local2o365] started
2017.02.23 11:29:46 LOG3[23]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:46 LOG5[23]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:46 LOG7[23]: Local descriptor (FD=3) closed
2017.02.23 11:29:46 LOG7[23]: Service [local2o365] finished (0 left)
2017.02.23 11:29:51 LOG5[cron]: DH parameters updated
2017.02.23 11:29:51 LOG6[cron]: Cron jobs completed in 63 seconds
2017.02.23 11:29:51 LOG7[cron]: Waiting 86337 seconds
2017.02.23 11:29:51 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:51 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:51 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:51 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:51 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:28318
2017.02.23 11:29:51 LOG7[24]: Service [uwo2local] started
2017.02.23 11:29:51 LOG7[24]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:51 LOG5[24]: Service [uwo2local] accepted connection from
172.18.58.5:28318
2017.02.23 11:29:51 LOG6[24]: failover: round-robin, starting at entry #0
2017.02.23 11:29:51 LOG6[24]: s_connect: connecting ::1:20587
2017.02.23 11:29:51 LOG7[24]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:29:51 LOG3[24]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:29:51 LOG6[24]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:51 LOG7[24]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:51 LOG5[24]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:51 LOG5[24]: Service [uwo2local] connected remote server
from 127.0.0.1:33168
2017.02.23 11:29:51 LOG7[24]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:51 LOG7[24]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:51 LOG7[24]: RFC 2487 not detected
2017.02.23 11:29:51 LOG6[24]: Peer certificate not required
2017.02.23 11:29:51 LOG7[24]: TLS state (accept): before SSL initialization
2017.02.23 11:29:51 LOG3[24]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:51 LOG5[24]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:51 LOG7[24]: Remote descriptor (FD=9) closed
2017.02.23 11:29:51 LOG7[24]: Local descriptor (FD=3) closed
2017.02.23 11:29:51 LOG7[24]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:51 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:51 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:51 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:51 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:51 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33168
2017.02.23 11:29:51 LOG7[25]: Service [local2o365] started
2017.02.23 11:29:51 LOG3[25]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:51 LOG5[25]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:51 LOG7[25]: Local descriptor (FD=3) closed
2017.02.23 11:29:51 LOG7[25]: Service [local2o365] finished (0 left)
2017.02.23 11:29:56 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:56 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:56 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:29:56 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:29:56 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
172.18.58.5:32441
2017.02.23 11:29:56 LOG7[26]: Service [uwo2local] started
2017.02.23 11:29:56 LOG7[26]: Option TCP_NODELAY set on local socket
2017.02.23 11:29:56 LOG5[26]: Service [uwo2local] accepted connection from
172.18.58.5:32441
2017.02.23 11:29:56 LOG6[26]: failover: round-robin, starting at entry #1
2017.02.23 11:29:56 LOG6[26]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:29:56 LOG7[26]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:29:56 LOG5[26]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:29:56 LOG5[26]: Service [uwo2local] connected remote server
from 127.0.0.1:33170
2017.02.23 11:29:56 LOG7[26]: Option TCP_NODELAY set on remote socket
2017.02.23 11:29:56 LOG7[26]: Remote descriptor (FD=9) initialized
2017.02.23 11:29:56 LOG7[26]: RFC 2487 not detected
2017.02.23 11:29:56 LOG6[26]: Peer certificate not required
2017.02.23 11:29:56 LOG7[26]: TLS state (accept): before SSL initialization
2017.02.23 11:29:56 LOG3[26]: SSL_accept: Peer suddenly disconnected
2017.02.23 11:29:56 LOG5[26]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:56 LOG7[26]: Remote descriptor (FD=9) closed
2017.02.23 11:29:56 LOG7[26]: Local descriptor (FD=3) closed
2017.02.23 11:29:56 LOG7[26]: Service [uwo2local] finished (0 left)
2017.02.23 11:29:56 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:29:56 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:29:56 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:29:56 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:29:56 LOG7[ui]: Service [local2o365] accepted (FD=3) from
127.0.0.1:33170
2017.02.23 11:29:56 LOG7[27]: Service [local2o365] started
2017.02.23 11:29:56 LOG3[27]: getpeerbyname (local_rfd): Transport endpoint
is not connected (107)
2017.02.23 11:29:56 LOG5[27]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:29:56 LOG7[27]: Local descriptor (FD=3) closed
2017.02.23 11:29:56 LOG7[27]: Service [local2o365] finished (0 left)
2017.02.23 11:30:00 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:30:00 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:30:00 LOG7[ui]: FD=7 events=0x2001 revents=0x1
2017.02.23 11:30:00 LOG7[ui]: FD=8 events=0x2001 revents=0x0
2017.02.23 11:30:00 LOG7[ui]: Service [uwo2local] accepted (FD=3) from
129.100.6.17:16594
2017.02.23 11:30:00 LOG7[28]: Service [uwo2local] started
2017.02.23 11:30:00 LOG7[28]: Option TCP_NODELAY set on local socket
2017.02.23 11:30:00 LOG5[28]: Service [uwo2local] accepted connection from
129.100.6.17:16594
2017.02.23 11:30:00 LOG6[28]: failover: round-robin, starting at entry #0
2017.02.23 11:30:00 LOG6[28]: s_connect: connecting ::1:20587
2017.02.23 11:30:00 LOG7[28]: s_connect: s_poll_wait ::1:20587: waiting 10
seconds
2017.02.23 11:30:00 LOG3[28]: s_connect: connect ::1:20587: Connection
refused (111)
2017.02.23 11:30:00 LOG6[28]: s_connect: connecting 127.0.0.1:20587
2017.02.23 11:30:00 LOG7[28]: s_connect: s_poll_wait 127.0.0.1:20587:
waiting 10 seconds
2017.02.23 11:30:00 LOG5[28]: s_connect: connected 127.0.0.1:20587
2017.02.23 11:30:00 LOG5[28]: Service [uwo2local] connected remote server
from 127.0.0.1:33176
2017.02.23 11:30:00 LOG7[28]: Option TCP_NODELAY set on remote socket
2017.02.23 11:30:00 LOG7[28]: Remote descriptor (FD=9) initialized
2017.02.23 11:30:00 LOG7[ui]: Found 1 ready file descriptor(s)
2017.02.23 11:30:00 LOG7[ui]: FD=4 events=0x2001 revents=0x0
2017.02.23 11:30:00 LOG7[ui]: FD=7 events=0x2001 revents=0x0
2017.02.23 11:30:00 LOG7[ui]: FD=8 events=0x2001 revents=0x1
2017.02.23 11:30:00 LOG7[ui]: Service [local2o365] accepted (FD=10) from
127.0.0.1:33176
2017.02.23 11:30:00 LOG7[29]: Service [local2o365] started
2017.02.23 11:30:00 LOG7[29]: Option TCP_NODELAY set on local socket
2017.02.23 11:30:00 LOG5[29]: Service [local2o365] accepted connection from
127.0.0.1:33176
2017.02.23 11:30:00 LOG6[29]: failover: round-robin, starting at entry #13
2017.02.23 11:30:00 LOG6[29]: s_connect: connecting 2603:1036:405:4a::2:587
2017.02.23 11:30:00 LOG3[29]: s_connect: connect 2603:1036:405:4a::2:587:
Network is unreachable (101)
2017.02.23 11:30:00 LOG6[29]: s_connect: connecting 2603:1036:3:11e::2:587
2017.02.23 11:30:00 LOG3[29]: s_connect: connect 2603:1036:3:11e::2:587:
Network is unreachable (101)
2017.02.23 11:30:00 LOG6[29]: s_connect: connecting 2603:1036:404:56::2:587
2017.02.23 11:30:00 LOG3[29]: s_connect: connect 2603:1036:404:56::2:587:
Network is unreachable (101)
2017.02.23 11:30:00 LOG6[29]: s_connect: connecting 40.97.132.210:587
2017.02.23 11:30:00 LOG7[29]: s_connect: s_poll_wait 40.97.132.210:587:
waiting 10 seconds
2017.02.23 11:30:00 LOG5[29]: s_connect: connected 40.97.132.210:587
2017.02.23 11:30:00 LOG5[29]: Service [local2o365] connected remote server
from 172.18.58.248:52538
2017.02.23 11:30:00 LOG7[29]: Option TCP_NODELAY set on remote socket
2017.02.23 11:30:00 LOG7[29]: Remote descriptor (FD=11) initialized
2017.02.23 11:30:00 LOG7[29]: <- 220 MWHPR2001CA0006.outlook.office365.com
Microsoft ESMTP MAIL Service ready at Thu, 23 Feb 2017 16:30:00 +0000
2017.02.23 11:30:00 LOG7[29]: -> 220 MWHPR2001CA0006.outlook.office365.com
Microsoft ESMTP MAIL Service ready at Thu, 23 Feb 2017 16:30:00 +0000
2017.02.23 11:30:00 LOG7[29]: -> EHLO localhost
2017.02.23 11:30:00 LOG7[28]: RFC 2487 detected
2017.02.23 11:30:00 LOG7[28]: <- 220 MWHPR2001CA0006.outlook.office365.com
Microsoft ESMTP MAIL Service ready at Thu, 23 Feb 2017 16:30:00 +0000
2017.02.23 11:30:00 LOG7[28]: -> 220 MWHPR2001CA0006.outlook.office365.com
stunnel for Microsoft ESMTP MAIL Service ready at Thu, 23 Feb 2017 16:30:00
+0000
2017.02.23 11:30:00 LOG7[29]: <- 250-MWHPR2001CA0006.outlook.office365.com
Hello [129.100.1.192]
2017.02.23 11:30:00 LOG7[29]: <- 250-SIZE 157286400
2017.02.23 11:30:00 LOG7[29]: <- 250-PIPELINING
2017.02.23 11:30:00 LOG7[29]: <- 250-DSN
2017.02.23 11:30:00 LOG7[29]: <- 250-ENHANCEDSTATUSCODES
2017.02.23 11:30:00 LOG7[29]: <- 250-STARTTLS
2017.02.23 11:30:00 LOG7[29]: <- 250-8BITMIME
2017.02.23 11:30:00 LOG7[29]: <- 250-BINARYMIME
2017.02.23 11:30:00 LOG7[29]: <- 250-CHUNKING
2017.02.23 11:30:00 LOG7[29]: <- 250 SMTPUTF8
2017.02.23 11:30:00 LOG7[29]: -> STARTTLS
2017.02.23 11:30:00 LOG7[29]: <- 220 2.0.0 SMTP server ready
2017.02.23 11:30:00 LOG6[29]: SNI: sending servername: smtp.office365.com
2017.02.23 11:30:00 LOG6[29]: Peer certificate required
2017.02.23 11:30:00 LOG7[29]: TLS state (connect): before SSL initialization
2017.02.23 11:30:00 LOG7[29]: TLS state (connect): SSLv3/TLS write client
hello
2017.02.23 11:30:00 LOG7[29]: TLS state (connect): SSLv3/TLS write client
hello
2017.02.23 11:30:00 LOG7[29]: TLS state (connect): SSLv3/TLS read server
hello
2017.02.23 11:30:00 LOG7[29]: Verification started at depth=1: C=US,
O=DigiCert Inc, CN=DigiCert Cloud Services CA-1
2017.02.23 11:30:00 LOG4[29]: CERT: Pre-verification error: unable to get
local issuer certificate
2017.02.23 11:30:00 LOG4[29]: Rejected by CERT at depth=1: C=US, O=DigiCert
Inc, CN=DigiCert Cloud Services CA-1
2017.02.23 11:30:00 LOG7[29]: Remove session callback
2017.02.23 11:30:00 LOG7[29]: Deallocating application specific data for
addr index
2017.02.23 11:30:00 LOG7[29]: TLS alert (write): fatal: unknown CA
2017.02.23 11:30:00 LOG3[29]: SSL_connect: 1416F086: error:1416F086:SSL
routines:tls_process_server_certificate:certificate verify failed
2017.02.23 11:30:00 LOG5[29]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2017.02.23 11:30:00 LOG7[29]: Deallocating application specific data for
addr index
Segmentation fault
[root@mtar1 stunnel]#
*Andrew Culver*
System Administrator
Information Technology Services <https://www.uwo.ca/its>
University of Western Ontario <https://www.uwo.ca>
e: aculver(a)uwo.ca
p: 519-661-2111 x80265 <15196612111,80265>
cal: html <http://goo.gl/wVoDlo> | ics <http://goo.gl/ncUjV0>
1
0
I'm trying to do a proof of concept using Stunnel on AIX 6.1.
Without stunnel I'd have:
Telnet session -> listening service
With stunnel, I want:
telnet session -> stunnel client -[secure connection]--> Stunnel server -->listening service.
The stunnel client seems to be working fine, but the stunnel server abends as soon as it receives a secure connection.
Client:
Accepts non-secure on port 33342. Forwards to secure socket 33343
stunnel stunnel.conf.2
2017.02.21 09:31:35 LOG5[ui]: stunnel 5.40 on powerpc-ibm-aix6.1.0.0 platform
2017.02.21 09:31:35 LOG5[ui]: Compiled/running with OpenSSL 1.0.2j 26 Sep 2016
2017.02.21 09:31:35 LOG5[ui]: Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI
2017.02.21 09:31:35 LOG5[ui]: Reading configuration from file /bmo/stunnel/bin/stunnel.conf.2
2017.02.21 09:31:35 LOG5[ui]: UTF-8 byte order mark detected
2017.02.21 09:31:35 LOG5[ui]: FIPS mode disabled
2017.02.21 09:31:35 LOG6[ui]: Initializing service [hif]
2017.02.21 09:31:35 LOG6[ui]: Loading certificate from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:35 LOG6[ui]: Certificate loaded from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:35 LOG6[ui]: Loading private key from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:35 LOG4[ui]: Insecure file permissions on /bmo/stunnel/stunnel.pem
2017.02.21 09:31:35 LOG6[ui]: Private key loaded from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:35 LOG4[ui]: Service [hif] needs authentication to prevent MITM attacks
2017.02.21 09:31:35 LOG5[ui]: Configuration successful
2017.02.21 09:31:38 LOG5[0]: Service [hif] accepted connection from 127.0.0.1:34749
2017.02.21 09:31:38 LOG6[0]: s_connect: connecting 127.0.0.1:33343
2017.02.21 09:31:38 LOG6[0]: s_connect: connected 127.0.0.1:33343
2017.02.21 09:31:38 LOG5[0]: Service [hif] connected remote server from 127.0.0.1:34750
2017.02.21 09:31:38 LOG6[0]: SNI: sending servername: localhost
2017.02.21 09:31:38 LOG6[0]: Peer certificate not required
2017.02.21 09:31:38 LOG3[0]: SSL_connect: Peer suddenly disconnected
2017.02.21 09:31:38 LOG5[0]: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket
Server
Accepts SSL connections on port 33343, connects to a non-secure service.
stunnel stunnel.conf.1
2017.02.21 09:31:25 LOG5[ui]: stunnel 5.40 on powerpc-ibm-aix6.1.0.0 platform
2017.02.21 09:31:25 LOG5[ui]: Compiled/running with OpenSSL 1.0.2j 26 Sep 2016
2017.02.21 09:31:25 LOG5[ui]: Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI
2017.02.21 09:31:25 LOG5[ui]: Reading configuration from file /bmo/stunnel/bin/stunnel.conf.1
2017.02.21 09:31:25 LOG5[ui]: UTF-8 byte order mark detected
2017.02.21 09:31:25 LOG5[ui]: FIPS mode disabled
2017.02.21 09:31:25 LOG6[ui]: Initializing service [hif]
2017.02.21 09:31:25 LOG6[ui]: Loading certificate from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:25 LOG6[ui]: Certificate loaded from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:25 LOG6[ui]: Loading private key from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:25 LOG4[ui]: Insecure file permissions on /bmo/stunnel/stunnel.pem
2017.02.21 09:31:25 LOG6[ui]: Private key loaded from file: /bmo/stunnel/stunnel.pem
2017.02.21 09:31:25 LOG5[ui]: Configuration successful
2017.02.21 09:31:38 LOG5[0]: Service [hif] accepted connection from 127.0.0.1:34750
2017.02.21 09:31:38 LOG6[0]: Peer certificate not required
INTERNAL ERROR: Bad magic at OpenSSL, line 0
(this is an abend - core file gets created).
log file exactly matches the standard output.
Any idea what's going wrong here?
dbx of the core file:
tbs@netcbccadvwvr01 /bmo/hif/stunnel-5.40/src>dbx /bmo/stunnel/bin/stunnel core
Type 'help' for help.
[using memory image in core]
reading symbolic information ...
IOT/Abort trap in abort at 0xd01af1f8 ($t3)
0xd01af1f8 (abort+0xf8) 80410014 lwz r2,0x14(r1)
(dbx) where
abort() at 0xd01af1f8
fatal_debug(txt = "Bad magic", file = "OpenSSL", line = 0), line 359 in "log.c"
get_alloc_list_ptr(ptr = 0x2007e1c8, file = "OpenSSL", line = 0), line 399 in "str.c"
str_detach_debug(ptr = 0x2007e1c8, file = "OpenSSL", line = 0), line 348 in "str.c"
str_free_debug(ptr = 0x2007e1c8, file = "OpenSSL", line = 0), line 383 in "str.c"
free_function(ptr = 0x2007e1c8), line 191 in "tls.c"
mem.CRYPTO_free() at 0xd97dd8d8
bn_lib.bn_expand2@AF37_5() at 0xd97e8da4
bn_mont.BN_mod_mul_montgomery() at 0xd981e150
ecp_mont.ec_GFp_mont_field_mul() at 0xd9837a18
ecp_smpl.ec_GFp_simple_point_get_affine_coordinates() at 0xd9839890
ec_lib.EC_POINT_get_affine_coordinates_GFp() at 0xd9a81dfc
ecp_oct.ec_GFp_simple_point2oct() at 0xd9acc0d4
ec_oct.EC_POINT_point2oct() at 0xd9acb754
ssl3_send_server_key_exchange() at 0xd99e7c28
ssl3_accept() at 0xd99e9950
SSL_accept() at 0xd99c0b98
ssl23_get_client_hello() at 0xd9a003f4
ssl23_accept() at 0xd9a00c5c
SSL_accept() at 0xd99c0b98
ssl_start(c = 0x20084cb8), line 431 in "client.c"
client_try(c = 0x20084cb8), line 273 in "client.c"
client_run(c = 0x20084cb8), line 181 in "client.c"
client_main(c = 0x20084cb8), line 140 in "client.c"
client_thread(arg = 0x20084cb8), line 99 in "client.c"
(dbx) thread
thread state-k wchan state-u k-tid mode held scope function
$t1 run running 26279997 u no sys __fd_poll
$t2 run running 45088879 u no sys _p_nsleep
>$t3 run running 19070997 k no sys abort
(dbx) list free_function
186
187 #if OPENSSL_VERSION_NUMBER<0x10100000L
188 NOEXPORT void free_function(void *ptr) {
189 /* CRYPTO_set_mem_ex_functions() needs a function rather than a macro */
190 /* unfortunately, OpenSSL provides no file:line information here */
191 str_free_debug(ptr, "OpenSSL", 0);
192 }
193 #endif
194
195 /* end of tls.c */
Should I be concerned that it looks like it is executing "free_function" from within an if statement "if OPENSSL_VERSION_NUMBER<0x1010000L but my openssl version is
2017.02.21 09:31:35 LOG5[ui]: Compiled/running with OpenSSL 1.0.2j 26 Sep 2016
Troubleshooting so far:
- I had the same problem with earlier versions of openssl.
- I've tried this with 5.37 as well (based on Brian McGinity's post from a few days ago), but get the same error.
Jacob
1
0
stunnel on Windows Client: Changing active network interface (wired, wireless)
by b.koch.kemper 17 Feb '17
by b.koch.kemper 17 Feb '17
17 Feb '17
Dear stunnel community,
we are running an application on our windows clients. The application needs
a remote connection to our server (linux) for remote function calls.
We could successfully secure this connection via stunnel.
However, when our windows users change their network connection (e.g. they
disconnect their notebook from the docking station to our corporate wifi)
the connection and hence the whole application breaks.
The users actually have to restart stunnel to make the application work
again, which is really inconvenient.
As the application on the notebook is always using the same port, is it
somehow possible to make stunnel establish a new connection using the new
active network interface?
Kind regards,
Bernhard
1
0
Hi, I upgraded my Stunnel server machine to CentOS 6.8 and post upgrade , the stunnel too got upgraded to stunnel 4.29 on x86_64-redhat-linux-gnu with OpenSSL 1.0.1e-fips 11 Feb 2013 .
Now since then many of the stunnel client using newer stunnel client (those uses TLSv1.2 for Negotiation) are not able to connect .
I get below error on the server in logs
RSA_sign:digest too big for rsa key:rsa_sign’
How to fix this please?
Regards,
Vikrant
1
0
08 Feb '17
I found the archives and downgraded to 5.37 and this fixed the problem.
Before going this route I tried 5.40 and 5.41 beta and both had the same
issues with 'Peer suddenly disconnected'.
Strange that it this was only happening for one particular connection (1 out
of 7). It would happen with every test. If you would like for me to beta
test another version, I would be happy to try.
Bran
1
0
After updating to stunnel 5.40 on x86-pc-msvc-1500 platform, I am getting a
Peer suddenly disconnected each time I post data to a particular url.
[VISION_WEB]
client = yes
accept = 127.0.0.1:1935
connect = xx.xx.web.com:443
sslVersion = TLSv1
2017.02.07 16:30:08 LOG5[160]: Service [XX_WEB] accepted connection from
192.168.100.21:53507
2017.02.07 16:30:08 LOG5[160]: s_connect: connected 11.11.111.36:443
2017.02.07 16:30:08 LOG5[160]: Service [XX_WEB] connected remote server from
192.168.100.21:53508
2017.02.07 16:30:08 LOG3[160]: SSL_connect: Peer suddenly disconnected
2017.02.07 16:30:08 LOG5[160]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
This is a production issue and is causing a lot of problems for a lot of
people and I need to do something quickly.
Is it possible to download stunnel 5.37 installed to see if going back to
this version will fix this issue? Where is it?
Or does anyone possibly know why this might be happening? Thank you for
your help.
Brian
1
0
Hi All
Wondering if there’s a way to pass an unencrypted connections traffic to an alternative location if a client does not SSL/TLS with the stunnel server?
So considering stunnel running as a server to wrap an unencrypted SMTP server. If the SMTP client/server talks SSL/TLS all is good and as expected. If the client tries to talk without encryption it gets disconnect.
Is there any way to send this traffic elsewhere rather than disconnecting the client? So that stunnel is adding an SSL/TLS option to a service rather than enforcing it. Splitting the traffic to destination servers based on if the client was encrypted or not.
Thoughts?
Thanks
Mark
2
3
Hello Gentlemen.
Needs help in configuration or negative clarifications on two issues.
1) First question whether is mixed use of cert/PSKsecrets auth possible?
The same method (ether cert or PSKsecrets explicitly) serverside trough the parent [TLS] and inherited services works properly. But mixed cert/PSKsecrets like in config snippet below doesn't work.
[TLS]
client = no
accept = 0.0.0.0:https
connect = localhost:http
cert = /etc/opt/stunnel/stunnel.pem
[ssh]
client = no
sni = TLS:ssh
connect = localhost:ssh
[socks]
client = no
sni = TLS:socks
protocol = socks
PSKsecrets = /etc/opt/stunnel/auth/passwd
The idea is to pass insensibly all incorrect or non-SNI aware requests to main http server and hide other multiplexed services. And at the same time to establish encryption and password access control to [socks] service.
2) And the second question is it possible proxy CONNECT after establishing SSL/TLS encryption?
The configuration section:
[ssh]
accept = 22222
protocol = connect
protocolHost = server.tld:443
protocolUsername = usernamehere
protocolPassword = passwordhere
connect = proxy.tld:8080
Say to establish unencrypted connection with proxy, pass username and password, tell proxy to establish CONNECT to target 443 and then transmit SSL/TLS to it.
Goal is if I have SSL/TLS termination server/proxy on port 443 so we at first speak SSL/TLS with proxy and only then proceed to proxy requests phase.
Thanks for future explanations.
1
0