stunnel-users

3306 discussions

set process name support in stunnel?
by Hank Leininger 28 Sep '08

28 Sep '08

Has anybody patched stunnel to modify its name in ps output, setproctitle-style, to tell more about itself? I'm thinking a config parameter "processname" which the user can specify in the service_name stanza (or just tack the service_name onto the end of the process title). I use stunnel mostly for ad-hoc client connections, or in a script to plug a perl script that knows how to fuzz IMAP, SMTP, etc into an SSL listener. For me the stunnel 3 command-line flag usage was ideal. But, I finally gave up and switched to using stunnel v4, usually piping a dynamically-generated config in on an fd. The downside with that is now instead of 'ps' showing useful, differentiating commandline flags for each stunnel process, I just have dozens of 'stunnel -fd 0's. It's possible to track down who's going where (netstat -antp, etc) but that's painful. Being able to set an arbitrary, meaningful-to-humans process name (or extra tag, etc) from config entries would resolve this, and might be useful for people with more conventional uses for stunnel. Thanks, -- Hank Leininger <hlein(a)korelogic.com> BE5D FCCA 673B D18B 98A9 3175 896E 3D4A 1B4D C5AC

1 0

Re: [stunnel-users] Stunnel License
by Bansal, Gaurav (Gaurav) 24 Sep '08

24 Sep '08

We are compiling stunnel source without any modification for different platform supported of our product. Then we are running stunnel as a standalone process after making changes to stunnel.conf file. In stunnel.conf file we are providing location of certificates and ports to be used We would distribute stunnel binary along with our product. Given the scenario I have mentioned do you foresee legal problems in usage of stunnel. I understand that OpenSSL uses OpenSSL license but I got this for openssl website. ==================================================== On many systems including the major Linux and BSD distributions, yes (the GPL does not place restrictions on using libraries that are part of the normal operating system distribution). On other systems, the situation is less clear. Some GPL software copyright holders claim that you infringe on their rights if you use OpenSSL with their software on operating systems that don't normally include OpenSSL. If you develop open source software that uses OpenSSL, you may find it useful to choose another license than the GPL, or state explicitly that "This program is released under the GPL with the additional exemption that compiling, linking, and/or using OpenSSL is allowed." If you are using GPL software developed by others, you may want to ask the copyright holder for permission to use their software with OpenSSL. ===================================================== Specifically I am concerned if Stunnel states that compiling, linking, and/or using OpenSSL is allowed Thanks Gaurav ________________________________ From: Bansal, Gaurav (Gaurav) Sent: Wednesday, September 24, 2008 5:27 PM To: 'webmaster(a)stunnel.org'; 'stunnel-users(a)mirt.net'; 'stunnel-users-owner(a)mirt.net'; 'Michal.Trojnara(a)mirt.net' Subject: Stunnel License Hi, We are planning to use Stunnel to encrypt traffic between Apache mod_jk and AJP connector of JBoss Tomcat. It seems that Stunnel uses OpenSSL APIs. Since Stunnel is available under GPL license, the license terms prevents us from using Stunnel in our product since it exposes OpenSSL which is also available under GPL license. I would like to know if there is also a commercial license available for stunnel? I would appreciate if you can throw pointers on how to package Stunnel with a commercial product. Thank Gaurav

2 1

Stunnel License
by Bansal, Gaurav (Gaurav) 24 Sep '08

24 Sep '08

Hi, We are planning to use Stunnel to encrypt traffic between Apache mod_jk and AJP connector of JBoss Tomcat. It seems that Stunnel uses OpenSSL APIs. Since Stunnel is available under GPL license, the license terms prevents us from using Stunnel in our product since it exposes OpenSSL which is also available under GPL license. I would like to know if there is also a commercial license available for stunnel? I would appreciate if you can throw pointers on how to package Stunnel with a commercial product. Thank Gaurav

1 0

Re: [stunnel-users] Compiled Stunnel 4.25 with OpenSSL 0.9.8h
by Nelgraine 22 Sep '08

22 Sep '08

Thanks for your reply. I’ve found out that Solaris 10 machine has default OpenSSL 0.9.7d located in /usr/local/ssl/bin. Update OpenSSL 0.9.8h using this command: ../config -fPIC shared no-idea threads make depend make make test make install But unfortunately the gcc link to old openssl 0.9.7d. How to update the link in gcc? Any help would be greatly appreciated. Thanks! Regards, Nelgraine --- On Sun, 9/21/08, stunnel-users-request(a)mirt.net <stunnel-users-request(a)mirt.net> wrote: > From: stunnel-users-request(a)mirt.net <stunnel-users-request(a)mirt.net> > Subject: stunnel-users Digest, Vol 50, Issue 15 > To: stunnel-users(a)mirt.net > Date: Sunday, September 21, 2008, 6:00 PM > Send stunnel-users mailing list submissions to > stunnel-users(a)mirt.net > > To subscribe or unsubscribe via the World Wide Web, visit > http://stunnel.mirt.net/mailman/listinfo/stunnel-users > or, via email, send a message with subject or body > 'help' to > stunnel-users-request(a)mirt.net > > You can reach the person managing the list at > stunnel-users-owner(a)mirt.net > > When replying, please edit your Subject line so it is more > specific > than "Re: Contents of stunnel-users digest..." > > > Today's Topics: > > 1. stunnel 4.26 released (Michal Trojnara) > 2. Re: Compiled Stunnel 4.25 with OpenSSL 0.9.8h > on Solaris 10 > (Michal Trojnara) > 3. stunnel 4.26 released (Michal Trojnara) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sat, 20 Sep 2008 23:13:50 +0200 > From: Michal Trojnara <Michal.Trojnara(a)mobi-com.net> > Subject: [stunnel-users] stunnel 4.26 released > To: 'stunnel-users(a)mirt.net' > <stunnel-users(a)mirt.net>, > stunnel-announce(a)mirt.net, openssl-users(a)openssl.org > Message-ID: > <86cf5ffd468849a8dba392b1d3bc6bb3(a)mobi-com.net> > Content-Type: text/plain; charset=US-ASCII; format=flowed > > Dear Users, > > Version 4.26, 2008.09.20, urgency: MEDIUM: > * New features > - Win32 DLLs for OpenSSL 0.9.8i. > - /etc/hosts.allow and /etc/hosts.deny no longer need to > be copied to > the chrooted directory, as the libwrap processes are no > longer > chrooted. > - A more informative error messages for invalid port > number specified > in stunnel.conf file. > - Support for Microsoft Visual C++ 9.0 Express Edition. > * Bugfixes > - Killing all libwrap processes at stunnel shutdown > fixed. > - A minor bug in stunnel.init sample SysV startup file > fixed. > > Home page/download: http://stunnel.mirt.net/ > > sha1sum for stunnel-4.24.tar.gz file: > 1c9f5dd6b21f354c356cd9100899a90a83068c68 > > Best regards, > Mike > > > > ------------------------------ > > Message: 2 > Date: Sun, 21 Sep 2008 00:13:07 +0200 > From: Michal Trojnara <Michal.Trojnara(a)mobi-com.net> > Subject: Re: [stunnel-users] Compiled Stunnel 4.25 with > OpenSSL 0.9.8h > on Solaris 10 > To: 'stunnel-users(a)mirt.net' > <stunnel-users(a)mirt.net> > Message-ID: > <6cb62b05bc25b1da1f8992ceadb133d4(a)mobi-com.net> > Content-Type: text/plain; charset=US-ASCII; format=flowed > > On 2008-09-19, at 04:36, Nelgraine wrote: > > Undefined first referenced > > symbol in file > > BIO_set_flags protocol.o > > SSL_CTX_set_info_callback ctx.o > > ld: fatal: Symbol referencing errors. No output > written to stunnel > > Is it possible that your system has more than one copy of > the OpenSSL > libraries? > Maybe gcc tries to link against the old ones instead of the > new ones? > > > 1. Should I need to upgrade OpenSSL 0.9.8h into > OpenSSL 0.9.8i? > > I don't think this could cause your problem. > > > 2. I have installed openssl 0.9.8h on Solaris 10 and > created several > > ca certificates. > > - If I will upgrade OpenSSL 0.9.8h into OpenSSL > 0.9.8i, should I > > also recreate ca certificates? > > No, you don't have to recreate your certificates. > > Best regards, > Mike > > > > ------------------------------ > > Message: 3 > Date: Sat, 20 Sep 2008 23:13:50 +0200 > From: Michal Trojnara <Michal.Trojnara(a)mobi-com.net> > Subject: [stunnel-users] stunnel 4.26 released > To: 'stunnel-users(a)mirt.net' > <stunnel-users(a)mirt.net>, > stunnel-announce(a)mirt.net, openssl-users(a)openssl.org > Message-ID: > <86cf5ffd468849a8dba392b1d3bc6bb3(a)mobi-com.net> > Content-Type: text/plain; charset=US-ASCII; format=flowed > > Dear Users, > > Version 4.26, 2008.09.20, urgency: MEDIUM: > * New features > - Win32 DLLs for OpenSSL 0.9.8i. > - /etc/hosts.allow and /etc/hosts.deny no longer need to > be copied to > the chrooted directory, as the libwrap processes are no > longer > chrooted. > - A more informative error messages for invalid port > number specified > in stunnel.conf file. > - Support for Microsoft Visual C++ 9.0 Express Edition. > * Bugfixes > - Killing all libwrap processes at stunnel shutdown > fixed. > - A minor bug in stunnel.init sample SysV startup file > fixed. > > Home page/download: http://stunnel.mirt.net/ > > sha1sum for stunnel-4.24.tar.gz file: > 1c9f5dd6b21f354c356cd9100899a90a83068c68 > > Best regards, > Mike > > ______________________________________________________________________ > OpenSSL Project > http://www.openssl.org > User Support Mailing List > openssl-users(a)openssl.org > Automated List Manager > majordomo(a)openssl.org > > > ------------------------------ > > _______________________________________________ > stunnel-users mailing list > stunnel-users(a)mirt.net > http://stunnel.mirt.net/mailman/listinfo/stunnel-users > > > End of stunnel-users Digest, Vol 50, Issue 15 > *********************************************

1 0

Compiled Stunnel 4.25 with OpenSSL 0.9.8h on Solaris 10
by Nelgraine 20 Sep '08

20 Sep '08

Ive read this article Compiling Stunnel 4.21 on Solaris 10 http://stunnel.mirt.net/pipermail/stunnel-users/2008-March/001895.html I've been also experiencing this kind of problem but I've Compiled Stunnel 4.25 with OpenSSL 0.9.8h on Solaris 10. Configure: # ./configure --prefix=/usr/local/stunnel-4.25 --with-ssl=/usr/local/openssl-0.9.8h configure: **************************************** success Make Error: gcc -g -O2 -Wall -Wshadow -Wcast-align -Wpointer-arith -I/usr/local/openssl-0.9.8h/include -o stunnel file.o client.o log.o options.o protocol.o network.o resolver.o ssl.o ctx.o verify.o sthreads.o stunnel.o pty.o libwrap.o -lz -ldl -lsocket -lnsl -lpthread -L/usr/local/openssl-0.9.8h/lib -lssl -lcrypto -lwrap Undefined first referenced symbol in file BIO_set_flags protocol.o SSL_CTX_set_info_callback ctx.o ld: fatal: Symbol referencing errors. No output written to stunnel My Question is: 1. Should I need to upgrade OpenSSL 0.9.8h into OpenSSL 0.9.8i? 2. I have installed openssl 0.9.8h on Solaris 10 and created several ca certificates. - If I will upgrade OpenSSL 0.9.8h into OpenSSL 0.9.8i, should I also recreate ca certificates? Any help would be greatly appreciated.

2 1

stunnel 4.26 released
by Michal Trojnara 20 Sep '08

20 Sep '08

Dear Users, Version 4.26, 2008.09.20, urgency: MEDIUM: * New features - Win32 DLLs for OpenSSL 0.9.8i. - /etc/hosts.allow and /etc/hosts.deny no longer need to be copied to the chrooted directory, as the libwrap processes are no longer chrooted. - A more informative error messages for invalid port number specified in stunnel.conf file. - Support for Microsoft Visual C++ 9.0 Express Edition. * Bugfixes - Killing all libwrap processes at stunnel shutdown fixed. - A minor bug in stunnel.init sample SysV startup file fixed. Home page/download: http://stunnel.mirt.net/ sha1sum for stunnel-4.24.tar.gz file: 1c9f5dd6b21f354c356cd9100899a90a83068c68 Best regards, Mike

1 0

Re: [stunnel-users] STunnel as a Relay server
by Ludolf Holzheid 19 Sep '08

19 Sep '08

On Thu, 2008-09-18 15:02:56 -0400, Thomas O'Hare wrote: > Ludolf > > Just got this as the main mail server was down for several days. > > The Win EXE that installs the STunnel service is what I meant. Is there > a way to edit the configuration text file to skip tunneling. There is > an ancient app on some PCs that can use only port 25 and we want to use > STunnel to do both SSL & non-SSL relays so we do not have to install & > maintain 2 different packages to basically do the same thing. Thomas, Of course, you get a clear-text port redirector if you connect two instances of stunnel running on the same machine, one acting as client, the other one as server. But again, I think this is oversized and not easier to set up than a simple TCP port redirector. Ludolf -- --------------------------------------------------------------- Ludolf Holzheid Tel: +49 621 339960 Bihl+Wiedemann GmbH Fax: +49 621 3392239 Floßwörthstraße 41 e-mail: lholzheid(a)bihl-wiedemann.de D-68199 Mannheim, Germany ---------------------------------------------------------------

1 0

Bug in tools stunnel.init
by Kevin A. McGrail 17 Sep '08

17 Sep '08

Hi Michael, I've upgraded to stunnel 4.25 and found a few small bugs in the init script. In stunnel.init.in, I'm pretty sure the DAEMON line should be DAEMON=@prefix@/bin/stunnel and not DAEMON=@prefix@/etc/stunnel Also, when the parent process is killed with stop, I see Sep 17 14:34:16 server stunnel: warning: can't get client address: Bad file descriptor because the child processes seem to stick around. I've modified the init script to kill the main process using the pid file and then using pidof to identify and kill the remaining child processes. Is this expected behavior? regards, KAM

2 2

Non-SSL Relay
by Thomas O'Hare 17 Sep '08

17 Sep '08

Hello I know the obvious and goes against what it was made for, but... Is there a way to use STunnel as a relay server w/o SSL? IOW, if you put STunnel in a number of installations but one or more PCs need a non-SSL server, can they use it? It would beat having to install "2" relay servers on each PC. -- Thanks, ~ Thomas O'Hare ~ Web, Wireless, Network, Database & Systems Software/Hardware Operations Manager | Virtual FoxPro User Group Tom(a)VFUG.Org | http://www.VFUG.Org/

1 0

STunnel as a Relay server
by Thomas O'Hare 16 Sep '08

16 Sep '08

I know this is against what STunnel was made for but... There are Stunnel installations on client PCs but they also need to use STunnel to also send to non-SSL entities -- since it is easier then installing 2 relay/proxy servers. Is there a way to make STunnel into a non-SSL relay server? -- Thanks, ~ Thomas O'Hare ~ Web, Wireless, Network, Database & Systems Software/Hardware Operations Manager | Virtual FoxPro User Group Tom(a)VFUG.Org | http://www.VFUG.Org/

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users