- stunnel-users - stunnel.org

Follow up to stunnel w/ zlib not working under windows.
by comsatcat 14 Jun '05

14 Jun '05

Just curious if anyone has stunnel working with zlib compression under windows? Please see my other post titled "Compression (zlib) does not work under windows" for more information. Thanks, Ben

1 0

Setting up Stunnel on Server AND Clients
by Peter Pentes 14 Jun '05

14 Jun '05

G'Day all, I'm having trouble understanding how to incorporate Stunnel into a client/server environment. There is a application running on the server which receives and sends data to various clients. The clients also have a communications application running. None of the apps (on both server and clients) support any form of encryption. So I want to use Stunnel for this. How would I set Stunnel up on the server and also the clients? I can't find an example on stunnel.org that discusses such a scenario. Any help would be great. Cheers. Peter __________________________________ Yahoo! Mail Stay connected, organized, and protected. Take the tour: http://tour.mail.yahoo.com/mailtour.html

2 2

Registering other dlls after running Stunnel
by andym＠rhotrading.com 13 Jun '05

13 Jun '05

I'm having a problem registering other dlls that depend on tibco and ws2_32. I could register them fine prior to putting stunnel on and now they are problematic. Trying regsvr32 returns nothing; not an error or a success. I can successfully install and uninstall this same dll on a different system that does not have Stunnel on it. Windows platform (XP). Has anyone else run into behavior like this and/or does anyone have any suggestions to troubleshoot. I've verified that the dll is not being registered silently by searching the registry. I spoke with a developer who said that Stunnel might be hooking in on my dlls registry attempt and causing it to blow up. Any thoughts? Thank you, Andy

1 0

How to Remove Stunnel From Start-Up?
by mhrtmhd94＠att.net 13 Jun '05

13 Jun '05

I have finally been able to delete and successfully re-install Stunnel, which I am using in conjunction with Agent. There are still some problems, which I think are more related to Agent, and I am consulting with Agent tech support. However, there is one problem with Stunnel. It starts when I boot into Windows (XP SP2). I did not intend for Stunnel to run except when I launch it along with Agent. How can I remove it from Start-Up? Stunnel DOES NOT appear under the Start-up tab when I run msconfig. If it is necessary to uninstall Stunnel and reinstall it, is there a convenient way of doing so? I had a helluva time doing this and eventually was able to accomplish it by deleting as many Stunnel entries as I could from the registry. Thanks. Mort Middleman

1 0

Stunnel and Gmail: 'Server is down' error
by John Latter 12 Jun '05

12 Jun '05

2 1

RE: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 12 Jun '05

12 Jun '05

The PRNG in HP-UX does not start until rc3. The normal place for syslog to start is in rc2, so I had placed stunnel and syslog-ng in rc2 for startup. I simply moved the startup script for PRNG to rc2. -----Original Message----- From: Dan Langille [mailto:[email protected]] Sent: Friday, June 10, 2005 10:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: RE: [stunnel-users] stunnel on HP-UX On 10 Jun 2005 at 10:04, Stephen Tanner wrote: > Please disregard, I have located the issue. And it was solved how? -- Dan Langille : http://www.langille.org/ BSDCan - The Technical BSD Conference - http://www.bsdcan.org/

2 1

Stunnel --- communication + encryption in both directions
by Paul Jones 12 Jun '05

12 Jun '05

Hi, I am interested in using Stunnel, but I am a little confused currently. The "Forwarding an insecure port securely from one machine to another" (http://www.stunnel.org/examples/generic_tunnel.html) example only discusses the situation for sending data from the server to the client (i.e. a single direction). How would stunnel have to be set up so that encrypted communication is achieve in both directions? That is, from server to client and also from client to server? Imagine that there is an application running on one end, and an identical app running on the other end and neither supports encryption. So I want to bring stunnel into the picture, so that communication is encrypted/decrypted on both ends. Cheers. Paul _________________________________________________________________ Free wallpapers on Level 9 http://level9.ninemsn.com.au/default.aspx

2 1

configure fails when cross compiling
by Paul Kramer 10 Jun '05

10 Jun '05

Hi Folks, I'm trying to run configure to cross compile, my host machine is linux and my target is mips hardard (mvista) I get the following configure errors: checking for /dev/ptmx and /dev/ptc cannnot check for file existence when cross compiling I poked around in the configure.ac and see there these are defined. What is the purpose for checking for the existence of this files? And... what flags should I be providing to configure? Thanks! Kramer

1 0

RE: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 10 Jun '05

10 Jun '05

Please disregard, I have located the issue. -----Original Message----- From: stunnel-users-bounces(a)mirt.net [mailto:[email protected]] On Behalf Of Stephen Tanner Sent: Friday, June 10, 2005 9:50 AM To: stunnel-users(a)mirt.net Subject: RE: [stunnel-users] stunnel on HP-UX This is what I am getting from stunnel when it starts: 2005.06.09 16:14:36 LOG5[1409:1]: stunnel 4.08 on hppa2.0w-hp-hpux11.11 PTHREAD+POLL+IPv4 with OpenSSL 0.9.7e 25 Oct 2004 2005.06.09 16:14:37 LOG4[1409:1]: PRNG may not have been seeded with enough random bytes 2005.06.09 16:14:37 LOG5[1409:1]: 27 clients allowed 2005.06.09 16:14:37 LOG5[1410:2]: 5140 connected from 127.0.0.1:49153 2005.06.09 16:14:37 LOG3[1410:2]: SSL_connect: Peer suddenly disconnected 2005.06.09 16:14:47 LOG5[1410:3]: 5140 connected from 127.0.0.1:49156 2005.06.09 16:14:47 LOG3[1410:3]: SSL_connect: Peer suddenly disconnected If I restart stunnel it establishes the connection fine, and does not receive the PRNG error. What can I do to generate enough random bytes to get this running properly, without starting stunnel later in the boot process? -----Original Message----- From: Stephen Tanner Sent: Tuesday, June 07, 2005 8:36 AM To: 'Jan Meijer' Subject: RE: [stunnel-users] stunnel on HP-UX Negative, the private key is not protected with a passphrase. If I use the startup script to start stunnel and syslog-ng manually, everything works. But on boot stunnel does not seem to properly establish a connection, and I must stop it and restart it to resolve the issue. Stephen -----Original Message----- From: Jan Meijer [mailto:[email protected]] Sent: Tuesday, June 07, 2005 3:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: Re: [stunnel-users] stunnel on HP-UX On Tue, 31 May 2005, Stephen Tanner wrote: > I'm running stunnel on a HP-UX 11.11 system so that I can securely > transfer logs with syslog-ng. I have stunnel and syslog-ng both > starting in rc2.d at S537. Every time I have rebooted the server I get > a broken pipe as if stunnel is having an issue establishing a tunnel, > and I am forced to restart stunnel and syslog-ng. Are there any > specific daemons that need to be running before stunnel starts? I'm > trying to avoid having this start too late, so that I don't miss logs on > some daemons. There are no specific daemons that need to run. Network is practical for DNS resolving if that's needed. To rule out the obvious: you would not have protected your stunnel private key with a passphrase would you? Jan -- http://www.surfnet.nl/organisatie/jame _______________________________________________ stunnel-users mailing list stunnel-users(a)mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users _______________________________________________ stunnel-users mailing list stunnel-users(a)mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users

2 1

RE: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 10 Jun '05

10 Jun '05

This is what I am getting from stunnel when it starts: 2005.06.09 16:14:36 LOG5[1409:1]: stunnel 4.08 on hppa2.0w-hp-hpux11.11 PTHREAD+POLL+IPv4 with OpenSSL 0.9.7e 25 Oct 2004 2005.06.09 16:14:37 LOG4[1409:1]: PRNG may not have been seeded with enough random bytes 2005.06.09 16:14:37 LOG5[1409:1]: 27 clients allowed 2005.06.09 16:14:37 LOG5[1410:2]: 5140 connected from 127.0.0.1:49153 2005.06.09 16:14:37 LOG3[1410:2]: SSL_connect: Peer suddenly disconnected 2005.06.09 16:14:47 LOG5[1410:3]: 5140 connected from 127.0.0.1:49156 2005.06.09 16:14:47 LOG3[1410:3]: SSL_connect: Peer suddenly disconnected If I restart stunnel it establishes the connection fine, and does not receive the PRNG error. What can I do to generate enough random bytes to get this running properly, without starting stunnel later in the boot process? -----Original Message----- From: Stephen Tanner Sent: Tuesday, June 07, 2005 8:36 AM To: 'Jan Meijer' Subject: RE: [stunnel-users] stunnel on HP-UX Negative, the private key is not protected with a passphrase. If I use the startup script to start stunnel and syslog-ng manually, everything works. But on boot stunnel does not seem to properly establish a connection, and I must stop it and restart it to resolve the issue. Stephen -----Original Message----- From: Jan Meijer [mailto:[email protected]] Sent: Tuesday, June 07, 2005 3:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: Re: [stunnel-users] stunnel on HP-UX On Tue, 31 May 2005, Stephen Tanner wrote: > I'm running stunnel on a HP-UX 11.11 system so that I can securely > transfer logs with syslog-ng. I have stunnel and syslog-ng both > starting in rc2.d at S537. Every time I have rebooted the server I get > a broken pipe as if stunnel is having an issue establishing a tunnel, > and I am forced to restart stunnel and syslog-ng. Are there any > specific daemons that need to be running before stunnel starts? I'm > trying to avoid having this start too late, so that I don't miss logs on > some daemons. There are no specific daemons that need to run. Network is practical for DNS resolving if that's needed. To rule out the obvious: you would not have protected your stunnel private key with a passphrase would you? Jan -- http://www.surfnet.nl/organisatie/jame _______________________________________________ stunnel-users mailing list stunnel-users(a)mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users

1 0

Compression (zlib) does not work under windows
by Ben 09 Jun '05

09 Jun '05

Hello, Enabling zlib compression in stunnel (versions 4.06 - 4.10) does not work under windows. I have tried a combination of the following, all of which have failed in either two ways. The first way being disconnection with the following messages in the stunnel console: 2005.06.09 11:43:10 LOG7[4072:3088]: SSL alert (write): fatal: decompression failure 2005.06.09 11:43:10 LOG3[4072:3088]: SSL_read: 1408F06B: error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression Or stunnel crashes all together. Here are the following combinations I've used with stunnel and openssl. stunnel 4.06 w/ all zlib binary openssl libraries stunnel 4.07 w/ all zlib binary enabled openssl libraries stunnel 4.08 w/ all zlib binary enabled openssl libraries stunnel 4.09 w/ all zlib enabled openssl libraries stunnel 4.10 w/ all zlib enabled openssl libraries stunnel 4.06 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.07 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.08 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.09 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.10 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ Under linux, using stunnel as a client, compression works correctly. On the server I have tried stunnel versions: stunnel 4.06 w/ zlib openssl 0.9.7g and openssl 0.9.7f stunnel 4.09 w/ zlib openssl 0.9.7g and openssl 0.9.7f stunnel 4.10 w/ zlib openssl 0.9.7g and openssl 0.9.7f Any help would be appreciated. We offer stunnel connections as a service to our clients to reduce the overhead of NNTP traffic and we would very much like to get compression working. Thanks for your time, Ben

1 0

RE: Re-Installing Stunnel
by mhrtmhd94＠att.net 08 Jun '05

08 Jun '05

On 2005-06-07, at 23:45:35, Michal.Trojnara(a)mirt.net wrote: > On 2005-06-06, at 22:56, mhrtmhd94(a)att.net wrote: > > The only way I could do this was to delete all of the programs in the > > Stunnel directory > > You should stop and uninstall stunnel service first. 8-) > AFAIK it's also possible to remove a service from Control > Panel/Services. > > Best regards, > Mike > There doesn't appear to be any Services option under Control Panel on my system (WinXp Home SP2) Thanks. Mort

2 1

Reinstalling Stunnel
by mhrtmhd94＠att.net 07 Jun '05

07 Jun '05

I followed the Agent/Stunnel instructions on WURD. I reached the point where I added a space, followed by -install to the shortcut target path. When I attempted to execute this, a message appeared: "Failed to create a new service." I want to thank all those who answered my previous request. I am hoping that someone with experience using Stunnel in conjunction with Agent might be able to help me. I can't for the life of me figure out what I did differently from the first time I installed Stunnel to run with Agent. One person who replied to my previous request asked if I had uninstalled the previous installation of Stunnel. The only way I could do this was to delete all of the programs in the Stunnel directory, because Stunnel does not appear on the list of programs under Add and Delete Programs via Control Panel. Note: I originally was using version 4.07. I am now attempting to use version 4.10. Could this be the problem? Thanks in advance to anyone who can help.

2 1

FW: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 07 Jun '05

07 Jun '05

I forgot to make sure this went to the list. -----Original Message----- From: Stephen Tanner Sent: Tuesday, June 07, 2005 8:36 AM To: 'Jan Meijer' Subject: RE: [stunnel-users] stunnel on HP-UX Negative, the private key is not protected with a passphrase. If I use the startup script to start stunnel and syslog-ng manually, everything works. But on boot stunnel does not seem to properly establish a connection, and I must stop it and restart it to resolve the issue. Stephen -----Original Message----- From: Jan Meijer [mailto:[email protected]] Sent: Tuesday, June 07, 2005 3:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: Re: [stunnel-users] stunnel on HP-UX On Tue, 31 May 2005, Stephen Tanner wrote: > I'm running stunnel on a HP-UX 11.11 system so that I can securely > transfer logs with syslog-ng. I have stunnel and syslog-ng both > starting in rc2.d at S537. Every time I have rebooted the server I get > a broken pipe as if stunnel is having an issue establishing a tunnel, > and I am forced to restart stunnel and syslog-ng. Are there any > specific daemons that need to be running before stunnel starts? I'm > trying to avoid having this start too late, so that I don't miss logs on > some daemons. There are no specific daemons that need to run. Network is practical for DNS resolving if that's needed. To rule out the obvious: you would not have protected your stunnel private key with a passphrase would you? Jan -- http://www.surfnet.nl/organisatie/jame

1 0

stunnel on HP-UX
by Stephen Tanner 07 Jun '05

07 Jun '05

I'm running stunnel on a HP-UX 11.11 system so that I can securely transfer logs with syslog-ng. I have stunnel and syslog-ng both starting in rc2.d at S537. Every time I have rebooted the server I get a broken pipe as if stunnel is having an issue establishing a tunnel, and I am forced to restart stunnel and syslog-ng. Are there any specific daemons that need to be running before stunnel starts? I'm trying to avoid having this start too late, so that I don't miss logs on some daemons. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Stephen Tanner HP-UX Systems Administrator Network Support Services Lee County Clerk of Courts =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

2 1

Reinstalling Stunnel
by mxrtmxd72＠att.net 06 Jun '05

06 Jun '05

I followed the Agent/Stunnel instructions on WURD. I reached the point where I added a space, followed by -install to the shortcut target path. When I attempted to execute this, a message appeared: "Failed to create a new service." I want to thank all those who answered my previous request. I am hoping that someone with experience using Stunnel in conjunction with Agent might be able to help me. I can't for the life of me figure out what I did differently from the first time I installed Stunnel to run with Agent. One person who replied to my previous request asked if I had uninstalled the previous installation of Stunnel. The only way I could do this was to delete all of the programs in the Stunnel directory, because Stunnel does not appear on the list of programs under Add and Delete Programs via Control Panel. Note: I originally was using version 4.07. I am now attempting to use version 4.10. Could this be the problem? Thanks in advance to anyone who can help. Mort Middleman

1 0

[PATCH] Fix inetd mode
by Miloslav Trmac 05 Jun '05

05 Jun '05

Hello, the attached patch fixes inetd mode. signal_pipe[] is not used in inetd mode, so it was left default-initialized to {0, 0}. Emptying "the pipe" would eat all input data. The second hunk was already posted here by Michal Trojnara. Mirek

2 1

slightly OT: starting up multiple instances
by Colin McKinnon 01 Jun '05

01 Jun '05

Hi all, I realise this is slightly OT (the problem seems to be in a different program) but thought that someobdy out there may have solved this one already. I'm trying to run a second instance of stunnel (different 'verify' level) on a SuSE 8.2 box. The second instance just doesn't start. What I did was to copy the supplied /etc/init.d/stunnel script to 'stunnelv' and referenced different config and PID files. After I had fixed bug in the startup script (the line which started the process - using startproc - didn't pass the conf file, and didn't get told to use the PID file) I still got the same error. Now, if I run '/etc/init.d/stunnel start' I get /var/run/stunnel.pid. If I then run '/etc/init.d/stunnelv start' it reports 'OK' but didn't really start. If I start them the other way around 'stunnelv' works and I get /var/run/stunnelv.pid but then 'stunnel' won't start. Thinking that 'startproc' is seeing 'stunnel' already running in the processlist, I tried creating a symbolic link '/usr/sbin/stunelv' to /usr/bin/stunnel and changed '/etc/init.d/stunnelv' to run that instead of '/usr/sbin/stunnel'. Looking in 'ps' it is reported as 'stunnelv' but I still can't get the second instance to start. The error seems to be with 'startproc' - it seems to think that the intended process is running when it's not. If I just type in the line which starts up stunnel as shown below I get the same behaviour. startproc -v -l /var/log/rc.stunnelv.log -p /var/run/stunnelv.pid /usr/sbin/stunnelv /etc/stunnel/verified_clients.conf Unfortunately, the '-v' option doesn't seem to work. Anybody any suggestions? TIA, Colin

2 1

[PATCH] Reject inetd mode with no client specification
by Miloslav Trmac 01 Jun '05

01 Jun '05

Hello, when stunnel is started in inetd mode without specifying connect = nor exec =, it attempts to execl(NULL) and the child SIGSEGVs. The attached patch adds a check to reject such configurations. Mirek

1 0

Problems with Stunnel4.05 on Linux Servers
by vasudha.upadhyaya＠convergys.com 27 May '05

27 May '05

Hi, We have been using stunnel 4.05 with OpenSSL 0.97d for quite sometime on Linux Servers and now suddenly we have been getting this error: 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 8506606B : error:8506606B:lib(133):AEP_GET_CONNECTION:init failure 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 85068069 : error:85068069:lib(133):AEP_MOD_EXP:get handle failed 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 8506606B : error:8506606B:lib(133):AEP_GET_CONNECTION:init failure 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 85068069 : error:85068069:lib(133):AEP_MOD_EXP:get handle failed 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 8506606B : error:8506606B:lib(133):AEP_GET_CONNECTION:init failure 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 85068069 : error:85068069:lib(133):AEP_MOD_EXP:get handle failed 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 8506606B : error:8506606B:lib(133):AEP_GET_CONNECTION:init failure 2005.05.27 14:07:39 LOG3[23121:59395]: error stack: 85069069 : error:85069069:lib(133):AEP_MOD_EXP_CRT:get handle failed Attached is the stunnel.conf file. (See attached file: stunnel.conf) Thanks, Vasudha. -------------------------------------------- Vasudha Upadhyaya Convergys Speech Solutions Ph:703-885-5837 vasudha.upadhyaya(a)convergys.com -- "NOTICE: The information contained in this electronic mail transmission is intended by Convergys Corporation for the use of the named individual or entity to which it is directed and may contain information that is privileged or otherwise confidential. If you have received this electronic mail transmission in error, please delete it from your system without copying or forwarding it, and notify the sender of the error by reply email or by telephone (collect), so that the sender's address records can be corrected."

1 0

Stunnel - Transfer loop executes not transferring any data.
by Glenn Stowe 27 May '05

27 May '05

Hi, did you find a resolution to this problem? I'm getting the same thing, and found your post while googling the user group.. Thx, Glenn -- CubeWerx Inc. | It's never too late to Glenn Stowe - Sales Techie Guy, | have a happy childhood. gstowe(a)cubewerx.com www.cubewerx.com | -- Tom Robbins, "Still Ph:(819) 771-6552 Fax:(819) 772-4838 | Life with Woodpecker"

1 0

stunnel terminates unexpectedly on FreeBSD 5.4
by Christian Wittenhorst 26 May '05

26 May '05

Bug Report: description: stunnel just terminated after exactly two incoming SSL connections. No error is logged, no core dump. affected versions: (plain ./configure) stunnel-4.04: works fine stunnel-4.05: crashes stunnel-4.08: crashes stunnel-4.10: crashes uname -a: FreeBSD db.kanti-zug.ch 5.4-RELEASE-p1 FreeBSD 5.4-RELEASE-p1 #0: Thu May 26 15:36:18 CEST 2005 [email protected]:/usr/src/sys/i386/compile/db i386 log: 2005.05.26 16:28:43 LOG5[20644:1]: stunnel 4.10 on i386-unknown-freebsd5.4 UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7e 25 Oct 2004 2005.05.26 16:28:43 LOG7[20644:1]: RAND_status claims sufficient entropy for the PRNG 2005.05.26 16:28:43 LOG6[20644:1]: PRNG seeded successfully 2005.05.26 16:28:43 LOG7[20644:1]: Certificate: /db/server.crt 2005.05.26 16:28:43 LOG7[20644:1]: Key file: /db/server.key 2005.05.26 16:28:43 LOG6[20644:1]: file ulimit = 11095 (can be changed with 'ulimit -n') 2005.05.26 16:28:43 LOG6[20644:1]: poll() used - no FD_SETSIZE limit for file descriptors 2005.05.26 16:28:43 LOG5[20644:1]: 5417 clients allowed 2005.05.26 16:28:43 LOG7[20644:1]: FD 4 in non-blocking mode 2005.05.26 16:28:43 LOG7[20644:1]: FD 5 in non-blocking mode 2005.05.26 16:28:43 LOG7[20644:1]: FD 6 in non-blocking mode 2005.05.26 16:28:43 LOG7[20644:1]: SO_REUSEADDR option set on accept socket 2005.05.26 16:28:43 LOG7[20644:1]: postgres bound to 85.158.25.7:5430 2005.05.26 16:28:43 LOG7[20644:1]: No pid file being created 2005.05.26 16:28:43 LOG7[20644:0]: Waiting -1 second(s) for 2 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:1]: postgres accepted FD=7 from 212.203.73.19:55038 2005.05.26 16:28:46 LOG7[20644:1]: Creating a new context 2005.05.26 16:28:46 LOG7[20644:1]: Context 2 created 2005.05.26 16:28:46 LOG7[20644:2]: postgres started 2005.05.26 16:28:46 LOG7[20644:2]: FD 7 in non-blocking mode 2005.05.26 16:28:46 LOG5[20644:2]: postgres connected from 212.203.73.19:55038 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): before/accept initialization 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 read client hello A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 write server hello A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 write certificate A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 write certificate request A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 flush data 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 300 second(s) for 3 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:2]: SSL alert (read): warning: no certificate 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 read client key exchange A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 read finished A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 write change cipher spec A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 write finished A 2005.05.26 16:28:46 LOG7[20644:2]: SSL state (accept): SSLv3 flush data 2005.05.26 16:28:46 LOG7[20644:2]: 1 items in the session cache 2005.05.26 16:28:46 LOG7[20644:2]: 0 client connects (SSL_connect()) 2005.05.26 16:28:46 LOG7[20644:2]: 0 client connects that finished 2005.05.26 16:28:46 LOG7[20644:2]: 0 client renegotiatations requested 2005.05.26 16:28:46 LOG7[20644:2]: 1 server connects (SSL_accept()) 2005.05.26 16:28:46 LOG7[20644:2]: 1 server connects that finished 2005.05.26 16:28:46 LOG7[20644:2]: 0 server renegotiatiations requested 2005.05.26 16:28:46 LOG7[20644:2]: 0 session cache hits 2005.05.26 16:28:46 LOG7[20644:2]: 1 session cache misses 2005.05.26 16:28:46 LOG7[20644:2]: 0 session cache timeouts 2005.05.26 16:28:46 LOG6[20644:2]: SSL accepted: new session negotiated 2005.05.26 16:28:46 LOG6[20644:2]: Negotiated ciphers: AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1 2005.05.26 16:28:46 LOG7[20644:2]: FD 8 in non-blocking mode 2005.05.26 16:28:46 LOG7[20644:2]: postgres connecting 127.0.0.1:5432 2005.05.26 16:28:46 LOG7[20644:2]: connect_wait: waiting 10 seconds 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 10 second(s) for 3 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:2]: connect_wait: connected 2005.05.26 16:28:46 LOG7[20644:2]: Remote FD=8 initialized 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=8, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->() 2005.05.26 16:28:46 LOG7[20644:2]: Socket closed on read 2005.05.26 16:28:46 LOG7[20644:2]: SSL write shutdown 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 60 second(s) for 3 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:46 LOG7[20644:2]: SSL alert (write): warning: close notify 2005.05.26 16:28:46 LOG7[20644:2]: SSL_shutdown retrying 2005.05.26 16:28:46 LOG7[20644:2]: SSL doesn't need to read or write 2005.05.26 16:28:46 LOG7[20644:0]: Waiting 60 second(s) for 3 file descriptor(s) 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:46 LOG7[20644:0]: CONTEXT 2, FD=7, (IN)->(IN) 2005.05.26 16:28:46 LOG7[20644:2]: SSL alert (read): warning: close notify 2005.05.26 16:28:46 LOG7[20644:2]: SSL closed on SSL_read 2005.05.26 16:28:46 LOG7[20644:2]: Socket write shutdown 2005.05.26 16:28:46 LOG5[20644:2]: Connection closed: 550 bytes sent to SSL, 446 bytes sent to socket 2005.05.26 16:28:46 LOG7[20644:2]: postgres finished (0 left) 2005.05.26 16:28:46 LOG7[20644:2]: Context 2 closed 2005.05.26 16:28:46 LOG7[20644:0]: Waiting -1 second(s) for 2 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:1]: postgres accepted FD=7 from 212.203.73.19:55040 2005.05.26 16:28:48 LOG7[20644:1]: Creating a new context 2005.05.26 16:28:48 LOG7[20644:1]: Context 3 created 2005.05.26 16:28:48 LOG7[20644:3]: postgres started 2005.05.26 16:28:48 LOG7[20644:3]: FD 7 in non-blocking mode 2005.05.26 16:28:48 LOG5[20644:3]: postgres connected from 212.203.73.19:55040 2005.05.26 16:28:48 LOG7[20644:3]: SSL state (accept): before/accept initialization 2005.05.26 16:28:48 LOG7[20644:3]: SSL state (accept): SSLv3 read client hello A 2005.05.26 16:28:48 LOG7[20644:3]: SSL state (accept): SSLv3 write server hello A 2005.05.26 16:28:48 LOG7[20644:3]: SSL state (accept): SSLv3 write change cipher spec A 2005.05.26 16:28:48 LOG7[20644:3]: SSL state (accept): SSLv3 write finished A 2005.05.26 16:28:48 LOG7[20644:3]: SSL state (accept): SSLv3 flush data 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 300 second(s) for 3 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:3]: SSL state (accept): SSLv3 read finished A 2005.05.26 16:28:48 LOG7[20644:3]: 1 items in the session cache 2005.05.26 16:28:48 LOG7[20644:3]: 0 client connects (SSL_connect()) 2005.05.26 16:28:48 LOG7[20644:3]: 0 client connects that finished 2005.05.26 16:28:48 LOG7[20644:3]: 0 client renegotiatations requested 2005.05.26 16:28:48 LOG7[20644:3]: 2 server connects (SSL_accept()) 2005.05.26 16:28:48 LOG7[20644:3]: 2 server connects that finished 2005.05.26 16:28:48 LOG7[20644:3]: 0 server renegotiatiations requested 2005.05.26 16:28:48 LOG7[20644:3]: 1 session cache hits 2005.05.26 16:28:48 LOG7[20644:3]: 1 session cache misses 2005.05.26 16:28:48 LOG7[20644:3]: 0 session cache timeouts 2005.05.26 16:28:48 LOG6[20644:3]: SSL accepted: previous session reused 2005.05.26 16:28:48 LOG7[20644:3]: FD 8 in non-blocking mode 2005.05.26 16:28:48 LOG7[20644:3]: postgres connecting 127.0.0.1:5432 2005.05.26 16:28:48 LOG7[20644:3]: connect_wait: waiting 10 seconds 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 10 second(s) for 3 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:3]: connect_wait: connected 2005.05.26 16:28:48 LOG7[20644:3]: Remote FD=8 initialized 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 43200 second(s) for 4 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=8, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->() 2005.05.26 16:28:48 LOG7[20644:3]: Socket closed on read 2005.05.26 16:28:48 LOG7[20644:3]: SSL write shutdown 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 60 second(s) for 3 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (INOUT)->(OUT) 2005.05.26 16:28:48 LOG7[20644:3]: SSL alert (write): warning: close notify 2005.05.26 16:28:48 LOG7[20644:3]: SSL_shutdown retrying 2005.05.26 16:28:48 LOG7[20644:3]: SSL doesn't need to read or write 2005.05.26 16:28:48 LOG7[20644:0]: Waiting 60 second(s) for 3 file descriptor(s) 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=4, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 1, FD=6, (IN)->() 2005.05.26 16:28:48 LOG7[20644:0]: CONTEXT 3, FD=7, (IN)->(IN) 2005.05.26 16:28:48 LOG7[20644:3]: SSL alert (read): warning: close notify 2005.05.26 16:28:48 LOG7[20644:3]: SSL closed on SSL_read 2005.05.26 16:28:48 LOG7[20644:3]: Socket write shutdown 2005.05.26 16:28:48 LOG5[20644:3]: Connection closed: 550 bytes sent to SSL, 446 bytes sent to socket 2005.05.26 16:28:48 LOG7[20644:3]: postgres finished (0 left)

2 2

Installing Stunnel
by mhrtmhd94＠att.net 26 May '05

26 May '05

I installed (actually re-installed) Stunnel. I got as far as creating the shortcut as follows: c:\stunnel\stunnel-4.10.exe -install. The message "Failed to Create a New Service" appeared. I need some help. Thanks.

2 1

Patch: verify_depth and remote_subj
by Michael Smith 26 May '05

26 May '05

Hi, I've attached a patch against stunnel 4.10. It adds two verification options to the global configuration: === remote_subj = expected subject for the remote certificate If set, the remote certificate's subject must match this string. You can obtain the subject in the proper format by running openssl x509 -in servercert.pem -noout -subject Example: remote_subj = /C=CA/ST=Ontario/CN=gw Requires verify=2 or greater. verify_depth = maximum number of CA certificates in chain Specifies the maximum certificate chain depth when verifying the peer certificate: 0: peer certificate must be self-signed 1: peer certificate must be signed by a root CA 2: peer certificate can be signed by at most one intermediate CA The stunnel default depth is 9 for backwards compatibility. Please note that Apache/SSL defaults to 1. If your non-CA certificates are marked with the X509v3 basic constraint "CA:FALSE", you probably do not need to worry about chain depth. This is the default behaviour for most CA tools, including the scripts that ship with OpenSSL. === remote_subj probably belongs in per-service config, not global, but the SSL verification setup is global and I didn't want to start messing with it. Mike

1 0

Upstream Connect
by Justin Alexander 25 May '05

25 May '05

Is there a way with stunnel for a client to connect to a server (hopping a firewall), forming a secured SSL/TCP connection, that will allow the server to connect back to the client machine over that tunnel? So far, all I've read is that stunnel only allows connections to start on the client and connect down stream (through the tunnel) to the server. I need to reverse this pattern.

1 0