After more research, stunnel and blue iris now working on IOS 13.4.1
sslVersion = TLSv1.2 <--- added this to stunnel.conf
[BlueIris]
accept=1440
connect=192.168.0.2:8080 <---- tried 8080 failed, tried 127.0.0.1 failed
cert = stunnel.pem
Like I said not an expert,
1
0
Hi Daniele.I haven't looked at exact scenario. Have you considered stunnel+HAproxy?
Dear group,
I've to configure a couple of tunneled connections (call them TC1 and
TC2), client side, on a linux system.
The target of both such connections is the same (destination ip and port
are the same, call it DST).
At source side (my server) I have a two IP addresses (call them IP1 and
IP2) assigned and currently working to its unique NIC. I normally use
iptables SNAT to split the traffic between IP1 and IP2 depending on
destination addresses but in this case I've to distinguish it at
application level (TC1 and TC2).
I'd like to get TC1 to set the outgoing traffic with source address IP1 and
TC2 to set outgoing traffic with source address IP2.
Tunnel Tunnel
Client Server
TC1: IP1 --\
>--> DST
TC2: IP2 --/
I'm thinking to set one entry in stunnel.conf for each TC1 and TC2 and use
*transparent* = source clause to set the source address but it seems my
case is not so common and I didn't find documentation.
Please could you suggest a solution.
Thanks
1
0
Hi I have been using stunnel or a number of years to create a secure
connect to CCTV recording software.
Today after upgrading to IOS 13.4.1 I can no longer connect
I ran generate self signed certificate, still fails.
Searching I found others with similar problem, some have created a cert
using other providers. I would prefer to generate from stunnel as I have
always done
config
[BlueIris]
accept=1440
connect=8080
cert = stunnel.pem
I am no expert, basically followed a simple setup
read few comments that it maybe due to IOS no longer supporting certain
version of ssl
Hopefully you can help
Log
2020.05.11 22:59:04 LOG5[main]: stunnel 5.56 on x64-pc-mingw32-gnu platform
2020.05.11 22:59:04 LOG5[main]: Compiled/running with OpenSSL 1.1.1c 28
May 2019
2020.05.11 22:59:04 LOG5[main]: Threading:WIN32 Sockets:SELECT,IPv6
TLS:ENGINE,OCSP,PSK,SNI
2020.05.11 22:59:04 LOG5[main]: Reading configuration from file stunnel.conf
2020.05.11 22:59:04 LOG5[main]: UTF-8 byte order mark detected
2020.05.11 22:59:04 LOG6[main]: Initializing service [BlueIris]
2020.05.11 22:59:04 LOG6[main]: Loading certificate from file: stunnel.pem
2020.05.11 22:59:04 LOG6[main]: Certificate loaded from file: stunnel.pem
2020.05.11 22:59:04 LOG6[main]: Loading private key from file: stunnel.pem
2020.05.11 22:59:04 LOG6[main]: Private key loaded from file: stunnel.pem
2020.05.11 22:59:04 LOG6[main]: DH initialization not needed
2020.05.11 22:59:04 LOG6[main]: Initializing service [gmail-pop3]
2020.05.11 22:59:04 LOG6[main]: Initializing service [gmail-imap]
2020.05.11 22:59:04 LOG6[main]: Initializing service [gmail-smtp]
2020.05.11 22:59:04 LOG6[main]: Initializing service [meinberg-smtp]
2020.05.11 22:59:04 LOG6[main]: Loading certificate from file: stunnel.pem
2020.05.11 22:59:04 LOG6[main]: Certificate loaded from file: stunnel.pem
2020.05.11 22:59:04 LOG6[main]: Loading private key from file: stunnel.pem
2020.05.11 22:59:04 LOG6[main]: Private key loaded from file: stunnel.pem
2020.05.11 22:59:04 LOG4[main]: Service [meinberg-smtp] needs
authentication to prevent MITM attacks
2020.05.11 22:59:04 LOG5[main]: Configuration successful
2020.05.11 22:59:04 LOG6[main]: Service [BlueIris] (FD=564) bound to
0.0.0.0:1440
2020.05.11 22:59:04 LOG6[main]: Service [gmail-pop3] (FD=728) bound to
127.0.0.1:110
2020.05.11 22:59:04 LOG6[main]: Service [gmail-imap] (FD=732) bound to
127.0.0.1:143
2020.05.11 22:59:04 LOG6[main]: Service [gmail-smtp] (FD=736) bound to
0.0.0.0:25
2020.05.11 22:59:04 LOG6[main]: Service [meinberg-smtp] (FD=740) bound to
192.168.0.2:2525
2020.05.11 22:59:04 LOG6[cron]: Executing cron jobs
2020.05.11 22:59:04 LOG6[cron]: Cron jobs completed in 0 seconds
2020.05.11 22:59:55 LOG5[0]: Service [BlueIris] accepted connection from
192.168.0.142:58797
2020.05.11 22:59:55 LOG6[0]: Peer certificate not required
2020.05.11 22:59:55 LOG3[0]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[0]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[1]: Service [BlueIris] accepted connection from
192.168.0.142:58798
2020.05.11 22:59:55 LOG6[1]: Peer certificate not required
2020.05.11 22:59:55 LOG3[1]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[1]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[2]: Service [BlueIris] accepted connection from
192.168.0.142:58799
2020.05.11 22:59:55 LOG6[2]: Peer certificate not required
2020.05.11 22:59:55 LOG3[2]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 22:59:55 LOG5[2]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[3]: Service [BlueIris] accepted connection from
192.168.0.142:58800
2020.05.11 22:59:55 LOG6[3]: Peer certificate not required
2020.05.11 22:59:55 LOG3[3]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[3]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[4]: Service [BlueIris] accepted connection from
192.168.0.142:58801
2020.05.11 22:59:55 LOG6[4]: Peer certificate not required
2020.05.11 22:59:55 LOG3[4]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[4]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[5]: Service [BlueIris] accepted connection from
192.168.0.142:58802
2020.05.11 22:59:55 LOG6[5]: Peer certificate not required
2020.05.11 22:59:55 LOG3[5]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 22:59:55 LOG5[5]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[6]: Service [BlueIris] accepted connection from
192.168.0.142:58803
2020.05.11 22:59:55 LOG6[6]: Peer certificate not required
2020.05.11 22:59:55 LOG3[6]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[6]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[7]: Service [BlueIris] accepted connection from
192.168.0.142:58804
2020.05.11 22:59:55 LOG6[7]: Peer certificate not required
2020.05.11 22:59:55 LOG3[7]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[7]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[8]: Service [BlueIris] accepted connection from
192.168.0.142:58805
2020.05.11 22:59:55 LOG6[8]: Peer certificate not required
2020.05.11 22:59:55 LOG3[8]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 22:59:55 LOG5[8]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[9]: Service [BlueIris] accepted connection from
192.168.0.142:58806
2020.05.11 22:59:55 LOG6[9]: Peer certificate not required
2020.05.11 22:59:55 LOG3[9]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[9]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[10]: Service [BlueIris] accepted connection from
192.168.0.142:58807
2020.05.11 22:59:55 LOG6[10]: Peer certificate not required
2020.05.11 22:59:55 LOG3[10]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[10]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[11]: Service [BlueIris] accepted connection from
192.168.0.142:58808
2020.05.11 22:59:55 LOG6[11]: Peer certificate not required
2020.05.11 22:59:55 LOG3[11]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 22:59:55 LOG5[11]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[12]: Service [BlueIris] accepted connection from
192.168.0.142:58809
2020.05.11 22:59:55 LOG6[12]: Peer certificate not required
2020.05.11 22:59:55 LOG3[12]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[12]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[13]: Service [BlueIris] accepted connection from
192.168.0.142:58810
2020.05.11 22:59:55 LOG6[13]: Peer certificate not required
2020.05.11 22:59:55 LOG3[13]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:55 LOG5[13]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:55 LOG5[14]: Service [BlueIris] accepted connection from
192.168.0.142:58811
2020.05.11 22:59:55 LOG6[14]: Peer certificate not required
2020.05.11 22:59:55 LOG3[14]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 22:59:55 LOG5[14]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:56 LOG5[15]: Service [BlueIris] accepted connection from
192.168.0.142:58812
2020.05.11 22:59:56 LOG6[15]: Peer certificate not required
2020.05.11 22:59:56 LOG3[15]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:56 LOG5[15]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:56 LOG5[16]: Service [BlueIris] accepted connection from
192.168.0.142:58813
2020.05.11 22:59:56 LOG6[16]: Peer certificate not required
2020.05.11 22:59:56 LOG3[16]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 22:59:56 LOG5[16]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 22:59:56 LOG5[17]: Service [BlueIris] accepted connection from
192.168.0.142:58814
2020.05.11 22:59:56 LOG6[17]: Peer certificate not required
2020.05.11 22:59:56 LOG3[17]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 22:59:56 LOG5[17]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[18]: Service [BlueIris] accepted connection from
192.168.0.142:58815
2020.05.11 23:00:04 LOG6[18]: Peer certificate not required
2020.05.11 23:00:04 LOG3[18]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[18]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[19]: Service [BlueIris] accepted connection from
192.168.0.142:58816
2020.05.11 23:00:04 LOG6[19]: Peer certificate not required
2020.05.11 23:00:04 LOG3[19]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[19]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[20]: Service [BlueIris] accepted connection from
192.168.0.142:58817
2020.05.11 23:00:04 LOG6[20]: Peer certificate not required
2020.05.11 23:00:04 LOG3[20]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 23:00:04 LOG5[20]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[21]: Service [BlueIris] accepted connection from
192.168.0.142:58818
2020.05.11 23:00:04 LOG6[21]: Peer certificate not required
2020.05.11 23:00:04 LOG3[21]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[21]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[22]: Service [BlueIris] accepted connection from
192.168.0.142:58819
2020.05.11 23:00:04 LOG6[22]: Peer certificate not required
2020.05.11 23:00:04 LOG3[22]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[22]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[23]: Service [BlueIris] accepted connection from
192.168.0.142:58820
2020.05.11 23:00:04 LOG6[23]: Peer certificate not required
2020.05.11 23:00:04 LOG3[23]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 23:00:04 LOG5[23]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[24]: Service [BlueIris] accepted connection from
192.168.0.142:58821
2020.05.11 23:00:04 LOG6[24]: Peer certificate not required
2020.05.11 23:00:04 LOG3[24]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[24]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[25]: Service [BlueIris] accepted connection from
192.168.0.142:58822
2020.05.11 23:00:04 LOG6[25]: Peer certificate not required
2020.05.11 23:00:04 LOG3[25]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[25]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[26]: Service [BlueIris] accepted connection from
192.168.0.142:58823
2020.05.11 23:00:04 LOG6[26]: Peer certificate not required
2020.05.11 23:00:04 LOG3[26]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 23:00:04 LOG5[26]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[27]: Service [BlueIris] accepted connection from
192.168.0.142:58824
2020.05.11 23:00:04 LOG6[27]: Peer certificate not required
2020.05.11 23:00:04 LOG3[27]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[27]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[28]: Service [BlueIris] accepted connection from
192.168.0.142:58825
2020.05.11 23:00:04 LOG6[28]: Peer certificate not required
2020.05.11 23:00:04 LOG3[28]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[28]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[29]: Service [BlueIris] accepted connection from
192.168.0.142:58826
2020.05.11 23:00:04 LOG6[29]: Peer certificate not required
2020.05.11 23:00:04 LOG3[29]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 23:00:04 LOG5[29]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[30]: Service [BlueIris] accepted connection from
192.168.0.142:58827
2020.05.11 23:00:04 LOG6[30]: Peer certificate not required
2020.05.11 23:00:04 LOG3[30]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[30]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[31]: Service [BlueIris] accepted connection from
192.168.0.142:58828
2020.05.11 23:00:04 LOG6[31]: Peer certificate not required
2020.05.11 23:00:04 LOG3[31]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[31]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[32]: Service [BlueIris] accepted connection from
192.168.0.142:58829
2020.05.11 23:00:04 LOG6[32]: Peer certificate not required
2020.05.11 23:00:04 LOG3[32]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 23:00:04 LOG5[32]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[33]: Service [BlueIris] accepted connection from
192.168.0.142:58830
2020.05.11 23:00:04 LOG6[33]: Peer certificate not required
2020.05.11 23:00:04 LOG3[33]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[33]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[34]: Service [BlueIris] accepted connection from
192.168.0.142:58831
2020.05.11 23:00:04 LOG6[34]: Peer certificate not required
2020.05.11 23:00:04 LOG3[34]: SSL_accept: ssl/record/rec_layer_s3.c:1535:
error:14094417:SSL routines:ssl3_read_bytes:sslv3 alert illegal parameter
2020.05.11 23:00:04 LOG5[34]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
2020.05.11 23:00:04 LOG5[35]: Service [BlueIris] accepted connection from
192.168.0.142:58832
2020.05.11 23:00:04 LOG6[35]: Peer certificate not required
2020.05.11 23:00:04 LOG3[35]: SSL_accept: ssl/statem/statem_srvr.c:1746:
error:14209175:SSL
routines:tls_early_post_process_client_hello:inappropriate fallback
2020.05.11 23:00:04 LOG5[35]: Connection reset: 0 byte(s) sent to TLS, 0
byte(s) sent to socket
1
0
I found the solution to the REDIR issue posted in April. You can find more information at https://support.google.com/chrome/forum/AAAAP1KN0B02tttvx4VCDQ/?hl=en&gpf=%….
The issue is going from https --> http or https. Our software company added an additional CRLR at the end so it looks like this now: "HTTP/1.1 301 Moved Permanently\r\n" + "Location: https://www.abc.com<https://www.abc.com/>" + http.req.url.path_and_query.http_url_safe + "\r\n\r\n".
Joe Sterk
1
0
I am trying to add ssl to my shoutcast stream. I get the messages below
when I try to start or restart shoutcast. I have purchased an ssl cert and
key for this and it did not work via the shoutcast config, so I gave this a
shot. The key and certs with combined into the stunnel.pem. See below and
thanks for the help. I also added the stunnel config below.
client=no
[shoutcast]
accept=8002 (I also tried 443)
connect=localhost:8000
cert = /etc/stunnel/stunnel.pem
pid=/etc/stunnel/stunnel.pid
-permissions are set to chmod 600
Stunnel Dir
root@kwaxstreamserver:/etc/stunnel# l
cert.pem key.pem README stunnel.conf stunnel.pem
Stunnel on START
Clients allowed=500
stunnel 4.53 on x86_64-pc-linux-gnu platform
Compiled with OpenSSL 1.0.1e 11 Feb 2013
Running with OpenSSL 1.0.1f 6 Jan 2014
Update OpenSSL shared libraries or rebuild stunnel
Threading:PTHREAD SSL:+ENGINE+OCSP Auth:LIBWRAP Sockets:POLL+IPv6
Reading configuration from file stunnel.conf
Compression not enabled
Snagged 64 random bytes from /root/.rnd
Wrote 1024 new random bytes to /root/.rnd
PRNG seeded successfully
Line 6: "pid = /etc/stunnel/stunnel.pid": Specified option name is not
valid here
str_stats: 7 block(s), 1063 data byte(s), 406 control byte(s)
Stunnel on RESTART
root@kwaxstreamserver:/etc/stunnel# /etc/init.d/stunnel4 restart
Restarting SSL tunnels: Clients allowed=500
stunnel 4.53 on x86_64-pc-linux-gnu platform
Compiled with OpenSSL 1.0.1e 11 Feb 2013
Running with OpenSSL 1.0.1f 6 Jan 2014
Update OpenSSL shared libraries or rebuild stunnel
Threading:PTHREAD SSL:+ENGINE+OCSP Auth:LIBWRAP Sockets:POLL+IPv6
Reading configuration from file /etc/stunnel/stunnel.conf
Compression not enabled
Snagged 64 random bytes from /root/.rnd
Wrote 1024 new random bytes to /root/.rnd
PRNG seeded successfully
Line 6: "pid = /etc/stunnel/stunnel.pid": Specified option name is not
valid here
str_stats: 7 block(s), 1076 data byte(s), 406 control byte(s)
[Failed: /etc/stunnel/stunnel.conf]
You should check that you have specified the pid= in you configuration file
2
1