stunnel-users

3306 discussions

Fw: High memory usage problem.
by mkanet＠yahoo.com 27 Mar '13

27 Mar '13

Jeremy, I know there's an android build of stunnel. Im not trying to be funny, but are you running stunnel on your mobile phone? :) The latest android mobile phones include quadcore CPU's with 2GB's of RAM It would be interesting to see how much of a load a mobile phone can handle with a USB to RJ45 Ethernet interface. Edit: I tried sending this earlier, but it doesn't look like it went through. My apologies in case this is a duplicate. ------------------------ Thanks for taking the time to read this. We're operating on a low spec system that can not be modified at this point. stunnel was introduced at the last minute, without consideration to resource requirements and now consumes enough ram to cause the kernel to issue OOM exceptions. So in short, we are trying to trade increased CPU usage for less memory usage and have tried setting “sessions” to 3600 to reduce memory pressure, but unfortunately it doesn't last. Our current solution is to cron a restart of stunnel on a regular basis, but would prefer to limit number of threads or number of cache entries or something else altogether similarly gentler. Thanks again for your consideration and assistance in this! If there's any specific information I can give, please let me know. Regards, Jeremy

3 7

environment/user variable
by Sebastian Rose-Indorf 26 Mar '13

26 Mar '13

Hello, Stunnel is a very helpful tool. But I miss the support of a environment/user variable to reference the configuration file or the folder of the configuration file: such as %GNUPGHOME% in GnuPG or %OPENSSL_CONF% in OpenSSL. Sebastian

1 0

the range of stunnel functionality
by John A. Wallace 26 Mar '13

26 Mar '13

Where can I find more information about the use and functionality of "tstunnel.exe"? Maybe I am going quite blind, but I looked around unsuccessfully. Thanks. John A. Wallace The pen is mightier than the sword, but only if you get in the first stroke.

3 3

stunnel 4.56 released
by Michal Trojnara 23 Mar '13

23 Mar '13

Dear Users, I have released version 4.56 of stunnel. The ChangeLog entry: Version 4.56, 2013.03.22, urgency: HIGH: * New features - Win32 installer automatically configures firewall exceptions. - Win32 installer configures administrative shortcuts to invoke UAC. - Improved Win32 GUI shutdown time. * Bugfixes - Fixed a regression bug introduced in version 4.55 causing random crashes on several platforms, including Windows 7. - Fixed startup crashes on some Win32 systems. - Fixed incorrect "stunnel -exit" process synchronisation. - Fixed FIPS detection with new versions of the OpenSSL library. - Failure to open the log file at startup is no longer ignored. Home page: https://www.stunnel.org/ Download: https://www.stunnel.org/downloads.html SHA-256 hash for stunnel-4.56.tar.gz: 9cae2cfbe26d87443398ce50d7d5db54e5ea363889d5d2ec8d2778a01c871293 Best regards, Mike

2 2

4.56 FIPS startup issue
by Ian Donaldson 23 Mar '13

23 Mar '13

Hi, I've been using stunnel for years and tried to upgrade to 4.56 today and it fails to start with this error: Clients allowed=125 stunnel 4.56 on i386-pc-solaris2.9 platform Compiled/running with OpenSSL 1.0.1e 11 Feb 2013 Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS Reading configuration from file /opt/local/etc/stunnel.conf FIPS_mode_set: F06D065: error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not supported Line 36: "[pop3s]": Failed to initialize SSL str_stats: 5 block(s), 118 data byte(s), 210 control byte(s) I note some mention of FIPS in today's release. 4.55 started ok though with the same version of openssl (and crashed a few hours later), so we're back to 4.54 again. Ian D

1 1

stunnel craches in windows 7 x64
by Mosy Mosy 15 Mar '13

15 Mar '13

I have been facing with a strange bug in stunnel 4.55 (and also in tstunnel) in Windows 7 x64 and also in Windows Server 2003 R2 x86. I redirect TCP connections from a win7 client to a win2k3 server. Stunnel works fine when accepting connections and transferring data. But suddenly crashes when the client program (in the client side) closes the connection (maybe the several connections simultaneously). It happens on the server side too. Because of this problem I have to load a little program to relaunch stunnel whenever it is crashed. What I mean by 'crash' is that the windows shows the "stunnel stops working" and giving the choices to restart,stop, or debug the program. If you need more details I will be pleased to help you in this case. Thank you :) PS: I just have downloaded "stunnel-4.56b1" and I'm using it right now. I see no sign of crashing and instability until this moment :) it seems the bug is eliminated :)

1 0

4.55 is unstable
by Death Master 14 Mar '13

14 Mar '13

Windows build of 4.55, 2013.03.03 crashes every 20-60sec under load. OS:Win7 x64 (with all updates) This bug affects both stunnel and tstunnel. Please fix it soon ;)

5 6

stunnel: SSL routinesdecryption failed or bad record mac
by Kishore Paul 13 Mar '13

13 Mar '13

Hello Everyone, I updated to the latest version of stunnel and openssl and am still getting a lot of decryption fails. stunnel: SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac and a few times it just segfaults: [937987.314573] stunnel: segfault at 7f6164025000 ip 00007f616d8b5adc sp 00007f616e6a9af0 error 4 in libcrypto.so.1.0.0[7f616d84a000+19f000] stunnel 4.54 on x86_64-unknown-linux-gnu platform Compiled with OpenSSL 1.0.1e 11 Feb 2013 Running with OpenSSL 1.0.1 14 Mar 2012 Is there any way to avoid these errors? I limited my cipher set to just RC4-SHA after seeing that there is an issue even in openssl 1.01e-1 for e_aes_cbc_hmac_sha1.c http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678353 Appreciate your help. Thanks, Kishore

1 0

Need help to configure STUNNEL using proxy socks v5 to send file to a server
by laurent.uk＠bnpparibas.com 11 Mar '13

11 Mar '13

Hi everyone, I need to connect to proxy socks V5 in order to send file in my server. I configure my stunnel like this : sslVersion = SSLv3 client=yes cert = /opt/freeware/etc/stunnel/ca_nopass.pem pid = /var/adm/stunnel_test.pid socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 debug = 7 output = /logs/stunnel/stunnel.log ; Don't forget to c_rehash CApath ; CApath is located inside chroot jail CApath = /opt/freeware/etc/stunnel/CA_files/ protocol = connect protocolAuthentication = basic protocolHost = ***:8080 [pesit] accept = 12099 connect = ***:433 But it doesn't works! The log from my stunnel client : 2013.03.11 18:57:30 LOG5[26673178:260]: Service pesit accepted connection from ***:48549 2013.03.11 18:57:30 LOG7[26673178:260]: remote socket: FD=1 allocated (non-blocking mode) 2013.03.11 18:57:30 LOG6[26673178:260]: connect_blocking: connecting ::1:10443 2013.03.11 18:57:30 LOG3[26673178:260]: connect_blocking: connect ::1:10443: Connection refused (79) 2013.03.11 18:57:30 LOG7[26673178:260]: remote socket: FD=1 allocated (non-blocking mode) 2013.03.11 18:57:30 LOG6[26673178:260]: connect_blocking: connecting ****:10443 2013.03.11 18:57:30 LOG5[26673178:260]: connect_blocking: connected ****:10443 2013.03.11 18:57:30 LOG5[26673178:260]: Service pesit connected remote server from ****:48551 2013.03.11 18:57:30 LOG7[26673178:260]: Remote FD=1 initialized 2013.03.11 18:57:30 LOG7[26673178:260]: Option TCP_NODELAY set on remote socket 2013.03.11 18:57:30 LOG6[26673178:260]: Client-mode connect protocol negotiations started 2013.03.11 18:57:30 LOG7[26673178:260]: -> CONNECT ****:1080 HTTP/1.1 2013.03.11 18:57:30 LOG7[26673178:260]: -> Host: ****:1080 2013.03.11 18:57:30 LOG7[26673178:260]: -> 2013.03.11 18:57:30 LOG3[26673178:260]: fdgetline: readsocket: Connection reset by peer (73) 2013.03.11 18:57:30 LOG5[26673178:260]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket 2013.03.11 18:57:30 LOG7[26673178:260]: Service pesit finished (0 left) 2013.03.11 18:57:30 LOG7[26673178:260]: str_stats: 0 block(s), 0 data byte(s), 0 control byte(s) 2013.03.11 18:57:32 LOG7[26673178:1]: local socket: FD=0 allocated (non-blocking mode) In my stunnel server, i have the following message : "SSL_accept: 1407609B: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy request" 2013.03.11 18:57:30 LOG7[27525210:1]: Service pesitip accepted FD=0 from ****:48551 2013.03.11 18:57:30 LOG7[27525210:265]: Service pesitip started 2013.03.11 18:57:30 LOG7[27525210:265]: Option TCP_NODELAY set on local socket 2013.03.11 18:57:30 LOG5[27525210:265]: Service pesitip accepted connection from 159.50.49.69:48551 2013.03.11 18:57:30 LOG3[27525210:265]: SSL_accept: 1407609B: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy request 2013.03.11 18:57:30 LOG5[27525210:265]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket 2013.03.11 18:57:30 LOG7[27525210:265]: Service pesitip finished (0 left) 2013.03.11 18:57:30 LOG7[27525210:265]: str_stats: 0 block(s), 0 data byte(s), 0 control byte(s) 2013.03.11 18:57:32 LOG7[27525210:1]: local socket: FD=0 allocated (non-blocking mode) Can you help me to configure my stunnel please? Thanks. Regards, Laurent UK This message and any attachments (the "message") is intended solely for the intended addressees and is confidential. If you receive this message in error,or are not the intended recipient(s), please delete it and any copies from your systems and immediately notify the sender. Any unauthorized view, use that does not comply with its purpose, dissemination or disclosure, either whole or partial, is prohibited. Since the internet cannot guarantee the integrity of this message which may not be reliable, BNP PARIBAS (and its subsidiaries) shall not be liable for the message if modified, changed or falsified. Do not print this message unless it is necessary,consider the environment. ---------------------------------------------------------------------------------------------------------------------------------- Ce message et toutes les pieces jointes (ci-apres le "message") sont etablis a l'intention exclusive de ses destinataires et sont confidentiels. Si vous recevez ce message par erreur ou s'il ne vous est pas destine, merci de le detruire ainsi que toute copie de votre systeme et d'en avertir immediatement l'expediteur. Toute lecture non autorisee, toute utilisation de ce message qui n'est pas conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite. L'Internet ne permettant pas d'assurer l'integrite de ce message electronique susceptible d'alteration, BNP Paribas (et ses filiales) decline(nt) toute responsabilite au titre de ce message dans l'hypothese ou il aurait ete modifie, deforme ou falsifie. N'imprimez ce message que si necessaire, pensez a l'environnement.

1 0

Mutual Authentication
by Sameer Rahmani 11 Mar '13

11 Mar '13

Hi guys, I want to have secure tunnel to my server and also i want only specified clients can connect via the tunnel to the server. I was reading about mutual authentication but i can't run stunnel using verify=2 or 3 or 4. I confused. Can you please explain for me what should i do to use 2way ssl connection? how does stunnel use this?

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users