stunnel-users

3306 discussions

Stunnel Win32 binary
by Michal Trojnara 30 Sep '05

30 Sep '05

Dear Users, Some people were asking me for a standalone stunnel.exe file. It's located in stunnel-4.12/src directory of stunnel-4.12.tar.gz archive. Winzip can handle .tar.gz format, so you'll be able to unpack it. http://www.winzip.com/wzdifs.htm BTW: I recommend to try the installer, anyway. It's designed to make the upgrade much easier. You can simply enter the path where your current stunnel.exe and stunnel.conf are located during the install. stunnel.conf and stunnel.pem files won't be replaced and your Windows will remember the path so you won't have to enter it on next upgrade. Also the latest OpenSSL DLLs are installed in stunnel directory each time. Notes: 1. Uninstall removes stunnel.conf, so don't uninstall if you're only going to upgrade stunnel. 2. Remember to stop stunnel before you uninstall/upgrade it. Best regards, Mike

2 2

No encryption?
by Revelancefound＠aol.com 27 Sep '05

27 Sep '05

Dear patient users, It seems that stunnel does not encrypt outward traffic from my pc. I was able to get stunnel to work in the first place by having different proxies for each protocol. However, to test if my 8196 bit + x509 certificate keys actually encrypted my traffic I decided to do a test. I had sniffed my own computer using Cain and Able while logging in to my home router. To my disappointment, the sniffer picked up my username and password in plain text through HTTP protocol several times. Either that or Able can crack 256bit level encryption (256 x 32 = 8196) rather quickly. My stunnel.conf file: ; Sample stunnel configuration file by Michal Trojnara 2002-2005 ; Some options used here may not be adequate for your particular configuration ; Certificate/key is needed in server mode and optional in client mode cert = C:\Program Files\stunnel\stunnel.pem key = C:\Program Files\stunnel\stunnel.pem ; Some performance tunings socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 ; Workaround for Eudora bug options = DONT_INSERT_EMPTY_FRAGMENTS ; Authentication stuff ;verify = 2 ; Don't forget to c_rehash CApath; CApath is located inside chroot jail: ;CApath = certs ; It's often easier to use CAfile: ;CAfile = certs.pem ; Don't forget to c_rehash CRLpath; CRLpath is located inside chroot jail: ;CRLpath = crls ; Alternatively you can use CRLfile: ;CRLfile = crls.pem ; Some debugging stuff useful for troubleshooting ;debug = 7 ;dutput = C:\Program Files\stunnel\stunnel.log ; Use it for client mode client = yes ; Service-level configuration client = yes verify = 0 ;[pop3s] ;accept = 995 ;connect = 110 ;[imaps] ;accept = 993 ;connect = 143 [ssmtp] accept = 127.0.0.1:465 connect = httpsupportingproxy4:3124 TIMEOUTclose = 0 [http] accept = 127.0.0.1:444 connect = httpsupportingproxy3:6588 TIMEOUTclose = 0 [https] accept = 127.0.0.1:443 connect = httpsupportingproxy2:6588 TIMEOUTclose = 0 [ftps] accept = 127.0.0.1:21 connect = httpsupportingproxy1:6588 TIMEOUTclose = 0 ; vim:ft=dosini And my bat file used to generate keys: openssl req -new -x509 -days 365 -nodes -config C:\OpenSSL\bin\openssl.cnf -out stunnel.pem -keyout stunnel.pem ;requirements: ;OpensSSL.exe in C:\windows directory ;Installation of Win32OpenSSL-v0.9.8.mis to C:\ ;Edit C:\OpenSSL\bin\openssl.cnf strings ;[ req ] ;default_bits = 8196 ;default_keyfile = stunnel.pem ;distinguished_name = req_distinguished_name ;attributes = req_attributes ;x509_extensions = v3_ca # The extentions to add to the self signed cert Cain Log: ================================================================== = Cain's MAC Scanner/Promiscuous-mode Detector = ================================================================== IP Address: (Router) MAC Address: (RouterMAC) OUI Fingerprint: Cisco-Linksys, LLC Hostname: ARP Test (Broadcast 31-bit): * ARP Test (Broadcast 16-bit): * ARP Test (Broadcast 8-bit): * ARP Test (Group bit): * ARP Test (Multicast group 0): * ARP Test (Multicast group 1): * ARP Test (Multicast group 3): * Am I doing something wrong here?

3 2

question about usage of configfile
by Revelancefound＠aol.com 26 Sep '05

26 Sep '05

To put it blatantly, I am trying to make stunnel 4.12 create a 2 way encrypted channel from my home computer as a client to an SSL supporting proxy (HTTP). Also, I am using localhost (127.0.0.1) as a connect address for proxy settings in such programs as Internet Explorer or a download manager. A sample of my stunnel.conf is bellow: client = yes verify = 0 [https] accept = 127.0.0.1:8080 connect = ssl.supporting.httpproxy.with.openport:80 TIMEOUTclose = 0 ; vim:ft=dosini My computer currently has the following installed: stunnel-4.12 Opensslv0.9.8 (Win32OpenSSL-v0.9.8.exe) ActivePerl-5.8.7.813-MSWin32-x86-148120.msi Windows XP Home Edition (SP2) Whenever I try to connect to 127.0.0.1:8080 the stunnel log reports 2005.09.23 20:57:33 LOG5[6012:5668]: stunnel 4.12 on x86-pc-mingw32-gnu WIN32+IPv6 with OpenSSL 0.9.8 05 Jul 2005 2005.09.23 20:57:33 LOG5[6012:4600]: No limit detected for the number of clients 2005.09.23 20:57:38 LOG5[6012:1560]: https connected from 127.0.0.1:3226 2005.09.23 20:59:10 LOG5[6012:5396]: https connected from 127.0.0.1:3232 2005.09.23 21:04:10 LOG5[6012:4576]: https connected from 127.0.0.1:3249 2005.09.23 21:09:10 LOG5[6012:4652]: https connected from 127.0.0.1:3268 2005.09.23 21:14:10 LOG5[6012:5396]: https connected from 127.0.0.1:3283 2005.09.23 21:19:12 LOG5[6012:1556]: https connected from 127.0.0.1:3296 2005.09.23 21:24:13 LOG5[6012:4072]: https connected from 127.0.0.1:3309 2005.09.23 21:29:23 LOG3[6012:3408]: Failed to initialize remote connection 2005.09.23 21:29:23 LOG5[6012:6140]: https connected from 127.0.0.1:3332 And so on into infinity Am I trying to do the impossible, or are all those 8196 bit RSA keys (certified through x508) that I generated going to waste?

2 1

stunnel for dovecot
by dhaval thakar 26 Sep '05

26 Sep '05

dear friends, i m preparing for RHCE Exam, as dovecot can not be configured in host.deny (TCP wrappers), we can create tunnel using stunnel & can use for the security perpose. kindly help me blocking pop3 access using host.deny file (using dovecot for the pop3) thanks in advance

2 1

minor annoyance
by Alaric Dailey 26 Sep '05

26 Sep '05

I have been using stunnel for a while with great success, only one minor issue, I am using stunnel for my http server and it ALWAYS logs traffic as coming from the stunnel IP rather than the IP address it is really coming from, is there a way around this?

3 5

RE: [stunnel-users] newbie stunnel question
by Revelancefound＠aol.com 25 Sep '05

25 Sep '05

no data is being transfered, thats the problem 2005.09.24 09:41:19 LOG5[1672:3268]: stunnel 4.11 on x86-pc-mingw32-gnu WIN32+IPv6 with OpenSSL 0.9.7f 22 Mar 2005 2005.09.24 09:41:20 LOG5[1672:2716]: No limit detected for the number of clients 2005.09.24 09:41:33 LOG5[1672:3576]: http connected from 127.0.0.1:1876 2005.09.24 09:42:18 LOG5[1672:1176]: http connected from 127.0.0.1:1881 2005.09.24 09:42:35 LOG5[1672:1408]: http connected from 127.0.0.1:1884 2005.09.24 09:42:44 LOG5[1672:1028]: http connected from 127.0.0.1:1887 And so on until Failed to initialize remote connection My config file: client = yes cert=c:\stunnel\stunnel.pem [http] accept = 127.0.0.1:80 connect = httpsupportingsslserver:80 [https] accept = 127.0.0.1:443 connect = httpsupportingsslserver:80 [ftp] accept = 127.0.0.1:22 connect = httpsupportingsslserver:80 Am I missing something here?

2 1

newbie stunnel question
by Revelancefound＠aol.com 24 Sep '05

24 Sep '05

Hello, im new to stunnel 4.11 and I am currently having trouble creating ssl conncetions. My operating sysytem in Windows XP Home (SP2), I am running Stunnel not as a service and I do not have CERT nor chroot. I am trying to create a SSL tunnel from my pc (stunnel in client mode) to a SSL supporting proxy that does not spill my ip. Because I am using windows I have to edit the stunnel.conf file, its contense is displayed here: client = yes cert=c:\stunnel\stunnel.pem [http] accept = 127.0.0.1:3900 connect = 200.114.206.192:8080 [https] accept = 127.0.0.1:3900 connect = 200.114.206.192:8080 [ftp] accept = 127.0.0.1:3900 connect = 200.114.206.192:8080 After these values are estabolished an netstat -an shows Proto Local Address Foreign Address State TCP 127.0.0.1:3900 0.0.0.0:0 LISTENING Can someone please help me? Attachment:

3 3

stunnel >= 4.0.7 crashes on IPv6 enabled Windows 2000
by Peter Bieringer 24 Sep '05

24 Sep '05

Hi, 4.0.6 claim about "The procedure entry point freeaddrinfo could not be located in the dynamic link library WS2_32.DLL" 4.0.7 and above crashes "...has generated errors". Windows 2000 is IPv6 enabled by <http://msdn.microsoft.com/downloads/sdks/platform/tpipv6.asp> with information from: <http://msdn.microsoft.com/downloads/sdks/platform/tpipv6/faq.asp> Is it planned to fix this issue? BTW: IPv6 enabled 4.0.11 works fine on Linux ! Peter -- Dr. Peter Bieringer http://www.bieringer.de/pb/ GPG/PGP Key 0x958F422D mailto: pb at bieringer dot de Deep Space 6 Co-Founder and Core Member http://www.deepspace6.net/

2 3

Re: stunnel-users Digest, Vol 14, Issue 7
by mxrtmxd72＠att.net 22 Sep '05

22 Sep '05

Thanks Michael. -------------- Original message ---------------------- From: stunnel-users-request(a)mirt.net > Send stunnel-users mailing list submissions to > stunnel-users(a)mirt.net > > To subscribe or unsubscribe via the World Wide Web, visit > http://stunnel.mirt.net/mailman/listinfo/stunnel-users > or, via email, send a message with subject or body 'help' to > stunnel-users-request(a)mirt.net > > You can reach the person managing the list at > stunnel-users-owner(a)mirt.net > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of stunnel-users digest..." > > > Today's Topics: > > 1. Help Installing Stunnel After Reformat Drive (mxrtmxd72(a)att.net) > 2. Re: Help Installing Stunnel After Reformat Drive (Michal Trojnara) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 21 Sep 2005 20:21:03 +0000 > From: mxrtmxd72(a)att.net > Subject: [stunnel-users] Help Installing Stunnel After Reformat Drive > To: stunnel-users(a)mirt.net (stunnel-users) > Message-ID: > > <092120052021.21511.4331C0AE000BE230000054072160376316CDC90B98039B9D9803(a)att.net > > > > > I have been using Stunnel with Agent versioin 3. My system recently crashed and > I had to re-format the hard drive, reinstall Windows XP, and reinstall my apps. > I have followed the directions at wurd.com/cl_ssl_stunnel.php#Windows. > Fortunately, I had backups of the required files. > > I placed libeay32.dll, libssl32.dll, stunnel-4.10.exe, and stunnel.conf in > C:\Stunnel. > > I placed a shortcut on the desktop which points to C:\Batch\runagent.bat. > > C:\Batch\runagent.bat consists of the following line: > c:\batch\runagent.cmd > > c:\batch\runagent.cmd consists of the following lines: > net start stunnel > "C:\Program Files\Agent\agent.exe" > net stop stunnel > > There is also a desktop shortcut which points to C:\Stunnel\stunnel-4.10.exe. > > When I place a pause command following the net start stunnel line in > runagent.cmd a message appears: The service name is invalid. > > The WURD document seems to imply that it is not necessary to run stunnel-410.exe > -install unless you want Stunnel to run all the time. Am I missing something? > I don't remember exactly how I made this work when I first installed it before > my system crashed. > > Any assistance would be gratefully appreciated. Thanks. > > Mort Middleman > > > > > > > Print. > Move to folder: > > > > ------------------------------ > > Message: 2 > Date: Thu, 22 Sep 2005 10:05:51 +0200 > From: "Michal Trojnara" <Michal.Trojnara(a)mobi-com.net> > Subject: Re: [stunnel-users] Help Installing Stunnel After Reformat > Drive > To: "stunnel-users" <stunnel-users(a)mirt.net> > Message-ID: <001401c5bf4c$823b6f00$df66a8c0@DT1518000186> > Content-Type: text/plain; format=flowed; charset="iso-8859-2"; > reply-type=original > > Mort Middleman <mxrtmxd72(a)att.net> wrote: > > net start stunnel > [cut] > > The WURD document seems to imply that it is not necessary to run > > stunnel-410.exe > > -install unless you want Stunnel to run all the time. Am I missing > > something? > > Yes. You need to install a service in order to start it. 8-) > You can change Startup Type in your Control Panel/Services so stunnel > service is not started automatically. > > BTW: Stunnel 4.12 is going to be released with a Windows installer, so users > won't have to maually copy the dlls. 8-) > You could try a prerelease here: > ftp://ftp.mirt.net/stunnel/stunnel-4.12rc1-installer.exe > > Best regards, > Mike > > > > ------------------------------ > > _______________________________________________ > stunnel-users mailing list > stunnel-users(a)mirt.net > http://stunnel.mirt.net/mailman/listinfo/stunnel-users > > > End of stunnel-users Digest, Vol 14, Issue 7 > ********************************************

1 0

Help Installing Stunnel After Reformat Drive
by mxrtmxd72＠att.net 22 Sep '05

22 Sep '05

I have been using Stunnel with Agent versioin 3. My system recently crashed and I had to re-format the hard drive, reinstall Windows XP, and reinstall my apps. I have followed the directions at wurd.com/cl_ssl_stunnel.php#Windows. Fortunately, I had backups of the required files. I placed libeay32.dll, libssl32.dll, stunnel-4.10.exe, and stunnel.conf in C:\Stunnel. I placed a shortcut on the desktop which points to C:\Batch\runagent.bat. C:\Batch\runagent.bat consists of the following line: c:\batch\runagent.cmd c:\batch\runagent.cmd consists of the following lines: net start stunnel "C:\Program Files\Agent\agent.exe" net stop stunnel There is also a desktop shortcut which points to C:\Stunnel\stunnel-4.10.exe. When I place a pause command following the net start stunnel line in runagent.cmd a message appears: The service name is invalid. The WURD document seems to imply that it is not necessary to run stunnel-410.exe -install unless you want Stunnel to run all the time. Am I missing something? I don't remember exactly how I made this work when I first installed it before my system crashed. Any assistance would be gratefully appreciated. Thanks. Mort Middleman Print. Move to folder:

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users