stunnel-users

3306 discussions

Re: [stunnel-users] stunnel 4.10 on Suse 8.2
by Ionut Turturica 18 Jun '05

18 Jun '05

I use stunnel for testing and compare results with our products. I made a script to monitor the number of threads and memory per process, now it always show 1 thread. On Fri, 17 Jun 2005 23:55:57 +0300, Michal Trojnara <Michal.Trojnara(a)mirt.net> wrote: >> Now it's ok, but I want the pthreads back :) > > Why? > > Mike -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

2 1

Re: [stunnel-users] stunnel 4.10 on Suse 8.2
by Ionut Turturica 17 Jun '05

17 Jun '05

eh..I've missed that, it looks like a workaroud. Now it's ok, but I want the pthreads back :) On Fri, 17 Jun 2005 22:02:05 +0300, Michal Trojnara <Michal.Trojnara(a)mirt.net> wrote: > Did you try this one: > http://stunnel.mirt.net/pipermail/stunnel-users/2005-June/000532.html > ? > > Best regards, > Mike

1 0

stunnel 4.10 on Suse 8.2
by Ionut Turturica 17 Jun '05

17 Jun '05

I get a segmentation fault on first connect. To the default config, i've added the debug = 7 and foreground = yes. I have used for comparison 2 versions 4.09 and 4.10 compiled with default options (./configure, make, make install) It seems like UCONTEXT is not welcome on my machine. linux:~ # uname -a Linux linux 2.4.20-4GB #1 Mon Mar 17 17:54:44 UTC 2003 i686 unknown unknown GNU/Linux linux:~ # gcc -v Reading specs from /usr/lib/gcc-lib/i486-suse-linux/3.3/specs Configured with: ../configure --enable-threads=posix --prefix=/usr --with-local-prefix=/usr/local --infodir=/usr/share/info --mandir=/usr/share/man --libdir=/usr/lib --enable-languages=c,c++,f77,objc,java,ada --disable-checking --enable-libgcj --with-gxx-include-dir=/usr/include/g++ --with-slibdir=/lib --with-system-zlib --enable-shared --enable-__cxa_atexit i486-suse-linux Thread model: posix gcc version 3.3 20030226 (prerelease) (SuSE Linux) linux:~ # openssl version OpenSSL 0.9.7g 11 Apr 2005 linux:/usr/src/stunnel-4.10 # /usr/local/sbin/stunnel 2005.06.17 11:44:17 LOG5[10371:1]: stunnel 4.10 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005 2005.06.17 11:44:17 LOG7[10371:1]: RAND_status claims sufficient entropy for the PRNG 2005.06.17 11:44:17 LOG6[10371:1]: PRNG seeded successfully 2005.06.17 11:44:17 LOG7[10371:1]: Certificate: /usr/local/etc/stunnel/server.pem 2005.06.17 11:44:17 LOG7[10371:1]: Key file: /usr/local/etc/stunnel/server.pem 2005.06.17 11:44:17 LOG6[10371:1]: file ulimit = 1024 (can be changed with 'ulimit -n') 2005.06.17 11:44:17 LOG6[10371:1]: poll() used - no FD_SETSIZE limit for file descriptors 2005.06.17 11:44:17 LOG5[10371:1]: 500 clients allowed 2005.06.17 11:44:17 LOG7[10371:1]: FD 3 in non-blocking mode 2005.06.17 11:44:17 LOG7[10371:1]: FD 4 in non-blocking mode 2005.06.17 11:44:17 LOG7[10371:1]: FD 5 in non-blocking mode 2005.06.17 11:44:17 LOG7[10371:1]: SO_REUSEADDR option set on accept socket 2005.06.17 11:44:17 LOG7[10371:1]: pop3s bound to 0.0.0.0:995 2005.06.17 11:44:17 LOG7[10371:1]: FD 6 in non-blocking mode 2005.06.17 11:44:18 LOG7[10371:1]: SO_REUSEADDR option set on accept socket 2005.06.17 11:44:18 LOG7[10371:1]: https bound to 0.0.0.0:443 2005.06.17 11:44:18 LOG7[10371:1]: Created pid file /stunnel.pid 2005.06.17 11:44:18 LOG7[10371:0]: Waiting -1 second(s) for 3 file descriptor(s) 2005.06.17 11:44:20 LOG7[10371:0]: CONTEXT 1, FD=3, (IN)->() 2005.06.17 11:44:20 LOG7[10371:0]: CONTEXT 1, FD=5, (IN)->(IN) 2005.06.17 11:44:20 LOG7[10371:0]: CONTEXT 1, FD=6, (IN)->() 2005.06.17 11:44:20 LOG7[10371:1]: pop3s accepted FD=7 from 172.16.203.52:2148 2005.06.17 11:44:20 LOG7[10371:1]: Creating a new context 2005.06.17 11:44:20 LOG7[10371:1]: Context 2 created Segmentation fault linux:/usr/src/stunnel-4.09 # /usr/local/sbin/stunnel 2005.06.17 11:45:13 LOG5[10773:16384]: stunnel 4.09 on i686-pc-linux-gnu PTHREAD+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005 2005.06.17 11:45:13 LOG7[10773:16384]: RAND_status claims sufficient entropy for the PRNG 2005.06.17 11:45:13 LOG6[10773:16384]: PRNG seeded successfully 2005.06.17 11:45:13 LOG7[10773:16384]: Certificate: /usr/local/etc/stunnel/server.pem 2005.06.17 11:45:13 LOG7[10773:16384]: Key file: /usr/local/etc/stunnel/server.pem 2005.06.17 11:45:13 LOG6[10773:16384]: file ulimit = 1024 (can be changed with 'ulimit -n') 2005.06.17 11:45:13 LOG6[10773:16384]: poll() used - no FD_SETSIZE limit for file descriptors 2005.06.17 11:45:13 LOG5[10773:16384]: 500 clients allowed 2005.06.17 11:45:13 LOG7[10773:16384]: FD 3 in non-blocking mode 2005.06.17 11:45:13 LOG7[10773:16384]: FD 4 in non-blocking mode 2005.06.17 11:45:13 LOG7[10773:16384]: FD 5 in non-blocking mode 2005.06.17 11:45:13 LOG7[10773:16384]: SO_REUSEADDR option set on accept socket 2005.06.17 11:45:13 LOG7[10773:16384]: pop3s bound to 0.0.0.0:995 2005.06.17 11:45:13 LOG7[10773:16384]: FD 6 in non-blocking mode 2005.06.17 11:45:13 LOG7[10773:16384]: SO_REUSEADDR option set on accept socket 2005.06.17 11:45:13 LOG7[10773:16384]: https bound to 0.0.0.0:443 2005.06.17 11:45:13 LOG7[10773:16384]: Created pid file /stunnel.pid 2005.06.17 11:45:15 LOG7[10773:16384]: pop3s accepted FD=7 from 172.16.203.52:2150 2005.06.17 11:45:15 LOG7[10773:16384]: FD 7 in non-blocking mode 2005.06.17 11:45:15 LOG7[10779:16386]: pop3s started 2005.06.17 11:45:15 LOG7[10779:16386]: TCP_NODELAY option set on local socket 2005.06.17 11:45:15 LOG5[10779:16386]: pop3s connected from 172.16.203.52:2150 2005.06.17 11:45:15 LOG7[10779:16386]: SSL state (accept): before/accept initialization 2005.06.17 11:45:18 LOG3[10779:16386]: SSL_accept: Peer suddenly disconnected 2005.06.17 11:45:18 LOG7[10779:16386]: pop3s finished (0 left) -- Using Opera's revolutionary e-mail client: http://www.opera.com/m2/

1 0

Stunnel and Sun Calendar 5
by Michael Chanudet 17 Jun '05

17 Jun '05

Hi, I'm using stunnel with Sun Calendar on a Windows 2003 server. Everything works well until I'v move Sun Calendar on an other server. Now, when I go to my Sun Calendar, I need to refresh the page after having accepted the certificat. You can see the problem here => https://frodon.atnweb.com I'm using stunnel 4.10 libeay32.dll and libssl.dll version 0.9.7.3 (from openssl.org) My conf file looks like this: ------------------------------- key = E:\stunnel\stunnel.pem socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 debug = 3 output = E:\stunnel\stunnel.log [https] accept = 443 connect = 80 TIMEOUTclose = 0 -------------------------------- If someone can see where is the problem, I will be pleased to know the answer :) Thanks, Regards, Michaël CHANUDET atn groupe sa 2 allée des Mitaillères - 38240 Meylan - France Tél. : +33 (0)4.76.41.17.17 - Fax : +33 (0)4.76.41.05.45 www.atngroupe.fr

2 1

Re: They are also making changes in client.c (Tuc at T-B-O-H)
by Vasil Dimov 16 Jun '05

16 Jun '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is a reply to http://stunnel.mirt.net/pipermail/stunnel-users/2005-June/000541.html but it has nothing to do with oritignal subject, so I send it separately. CVS version of the FreeBSD port of stunnel can be found at: http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/stunnel/ the files/ subdir contains some changes to the original source. Some of them are FreeBSD specific and need only be applied on FreeBSD, but some are not. Changes to client.c are related to execvp problems. http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/stunnel/files/patch-sr… can be useful. Changes to common.h are a hack to make it possible for the user to choose ucontext/pthread/fork model at compile time. Log message can be found at: http://www.freebsd.org/cgi/cvsweb.cgi/ports/security/stunnel/files/patch-sr… It was invented as a workaround to the ucontext-problems, but is a good feature anyway. I think it will be great if someday we can use ./configure options like - --with-ucontext, --with-pthread, --with-fork, instead of using this ugly hack :) Regards, Vasil -----BEGIN PGP SIGNATURE----- iD8DBQFCsQ7pFw6SP/bBpCARAo3wAKDbu0lXx0+LMW31dksb4S8M74PukQCgwmwx KH0/Ohi+GtUwBSbYv8RkLsg= =wzW2 -----END PGP SIGNATURE-----

1 0

stunnel segfaulting on connection with 4.10
by brianmas＠highstream.net 15 Jun '05

15 Jun '05

Hello having a problem with stunnel sigsegv'ing on a machine answers to list questions below: 1. https to/from IPs bound on same machine the contents of my config file: cert = /usr/local/etc/poundcert.pem foreground = yes [poundssl] connect = xx.xx.xx.xx:80 accept = xx.xx.xx.xx:443 foreground option because I was debugging, does it with or without this option. 2. 4.10 3. standalone, /usr/local/sbin/stunnel /usr/local/etc/stunnel.cfg 4. -D and -f aren't flags in version I am using apparently. assume -D 7 is debug level debug (7) I'll add the log from a single session, all I am doing is connecting from a mozilla client and it instantly segfaults: # /usr/local/sbin/stunnel /usr/local/etc/stunnel.cfg 2005.06.15 10:02:21 LOG5[1245:1]: stunnel 4.10 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005 2005.06.15 10:02:21 LOG7[1245:1]: Snagged 64 random bytes from /root/.rnd 2005.06.15 10:02:21 LOG7[1245:1]: Wrote 1024 new random bytes to /root/.rnd 2005.06.15 10:02:21 LOG7[1245:1]: RAND_status claims sufficient entropy for the PRNG 2005.06.15 10:02:21 LOG6[1245:1]: PRNG seeded successfully 2005.06.15 10:02:21 LOG7[1245:1]: Certificate: /usr/local/etc/poundcert.pem 2005.06.15 10:02:21 LOG7[1245:1]: Key file: /usr/local/etc/poundcert.pem 2005.06.15 10:02:21 LOG6[1245:1]: file ulimit = 1024 (can be changed with 'ulimit -n') 2005.06.15 10:02:21 LOG6[1245:1]: poll() used - no FD_SETSIZE limit for file descriptors 2005.06.15 10:02:21 LOG5[1245:1]: 500 clients allowed 2005.06.15 10:02:21 LOG7[1245:1]: FD 3 in non-blocking mode 2005.06.15 10:02:21 LOG7[1245:1]: FD 4 in non-blocking mode 2005.06.15 10:02:21 LOG7[1245:1]: FD 5 in non-blocking mode 2005.06.15 10:02:21 LOG7[1245:1]: SO_REUSEADDR option set on accept socket 2005.06.15 10:02:21 LOG7[1245:1]: poundssl bound to xx.xx.xx.xx:443 2005.06.15 10:02:21 LOG7[1245:1]: Created pid file /usr/local/var/run/stunnel.pid 2005.06.15 10:02:21 LOG7[1245:0]: Waiting -1 second(s) for 2 file descriptor(s) 2005.06.15 10:02:39 LOG7[1245:0]: CONTEXT 1, FD=3, (IN)->() 2005.06.15 10:02:39 LOG7[1245:0]: CONTEXT 1, FD=5, (IN)->(IN) 2005.06.15 10:02:39 LOG7[1245:1]: poundssl accepted FD=6 from xx.xx.xx.xx:3939 2005.06.15 10:02:39 LOG7[1245:1]: Creating a new context 2005.06.15 10:02:39 LOG7[1245:1]: Context 2 created Segmentation fault 5. /usr/local/sbin/stunnel -version stunnel 4.10 on i686-pc-linux-gnu UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005 Global options cert = /usr/local/etc/stunnel/stunnel.pem ciphers = ALL:!ADH:+RC4:@STRENGTH debug = 5 key = /usr/local/etc/stunnel/stunnel.pem pid = /usr/local/var/run/stunnel.pid RNDbytes = 64 RNDfile = /dev/urandom RNDoverwrite = yes session = 300 seconds verify = none Service-level options TIMEOUTbusy = 300 seconds TIMEOUTclose = 60 seconds TIMEOUTconnect = 10 seconds TIMEOUTidle = 43200 seconds 6. uname -a Linux hsc14 2.4.27 #1 SMP Fri Feb 11 09:13:33 EST 2005 i686 i686 i386 GNU/Linux 7. # /lib/libc.so.6 GNU C Library stable release version 2.3.2, by Roland McGrath et al. Copyright (C) 2003 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Compiled by GNU CC version 3.2.2 20030222 (Red Hat Linux 3.2.2-5). Compiled on a Linux 2.4.20 system on 2003-02-27. Available extensions: GNU libio by Per Bothner crypt add-on version 2.1 by Michael Glad and others linuxthreads-0.10 by Xavier Leroy BIND-8.2.3-T5B libthread_db work sponsored by Alpha Processor Inc NIS(YP)/NIS+ NSS modules 0.19 by Thorsten Kukuk Thread-local storage support included. 8.]# gcc -v Reading specs from /usr/lib/gcc-lib/i386-redhat-linux/3.2.2/specs Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --enable-shared --enable-threads=posix --disable-checking --with-system-zlib --enable-__cxa_atexit --host=i386-redhat-linux Thread model: posix gcc version 3.2.2 20030222 (Red Hat Linux 3.2.2-5) 9. ok maybe this is a problem? # ]# openssl version OpenSSL 0.9.7a Feb 19 2003 but: [root@hsc14 etc]# grep "OpenSSL 0.9.7a" /usr/local/sbin/stunnel [root@hsc14 etc]# grep "OpenSSL 0.9.7g" /usr/local/sbin/stunnel Binary file /usr/local/sbin/stunnel matches which -a openssl only shows one binary and it's that old one. additionally here is the output of gdb: [root@hsc14 etc]# gdb /usr/local/sbin/stunnel GNU gdb Red Hat Linux (5.3post-0.20021129.18rh) Copyright 2003 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-redhat-linux-gnu"... (gdb) set arg /usr/local/etc/stunnel.cfg (gdb) run Starting program: /usr/local/sbin/stunnel /usr/local/etc/stunnel.cfg [New Thread 16384 (LWP 20866)] 2005.06.15 09:44:11 LOG5[20866:1]: stunnel 4.10 on i686-pc-linux-gnu UCONTEXT+PO LL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005 2005.06.15 09:44:11 LOG5[20866:1]: 500 clients allowed Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 16384 (LWP 20866)] 0x40026f0c in __pthread_internal_tsd_get () from /lib/libpthread.so.0 (gdb) bt #0 0x40026f0c in __pthread_internal_tsd_get () from /lib/libpthread.so.0 #1 0x40105edd in malloc () from /lib/libc.so.6 #2 0x400f59e3 in __fopen_internal () from /lib/libc.so.6 #3 0x400f5aae in fopen@@GLIBC_2.1 () from /lib/libc.so.6 #4 0x4008c28b in hosts_access () from /usr/lib/libwrap.so.0 #5 0x4008c207 in hosts_access () from /usr/lib/libwrap.so.0 #6 0x0804b9d9 in auth_libwrap (c=0x4009225c) at client.c:706 #7 0x0804a535 in init_local (c=0x811d638) at client.c:196 #8 0x0804a3b1 in do_client (c=0x811d638) at client.c:143 #9 0x0804a338 in client (arg=0x811d638) at client.c:120 #10 0x400d84b4 in __makecontext () from /lib/libc.so.6 any help is much appreciated. let me know if you need any more information. Thank you, brian

3 5

Fix unexpected stunnel-4.10 exits on FreeBSD
by Vasil Dimov 15 Jun '05

15 Jun '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The problem has been reported in the stunnel-users mailing list: http://stunnel.mirt.net/pipermail/stunnel-users/2005-May/000482.html http://stunnel.mirt.net/pipermail/stunnel-users/2005-May/000484.html http://stunnel.mirt.net/pipermail/stunnel-users/2005-May/000490.html on freebsd-ports mailing list: http://lists.FreeBSD.org/pipermail/freebsd-ports/2005-May/023344.html and has several FreeBSD problem reports submitted: http://www.FreeBSD.org/cgi/query-pr.cgi?pr=81001 http://www.FreeBSD.org/cgi/query-pr.cgi?pr=81162 http://www.FreeBSD.org/cgi/query-pr.cgi?pr=81289 Patch that fixes this problem can be found here: http://www.FreeBSD.org/cgi/query-pr.cgi?pr=82202 It does not break anything if applied with Linux stunnel, so it can be considered "universal". It will be good if we see this (or similar) fix in the next version of stunnel. The problem is that we cannot (at least on FreeBSD): 1. create context A (cleanup context) 2. create context B and set B's uc_link to point to A 3. swapcontext(3) to B What happens is that B's function returns, A's function passes control to the main thread of execution 4. create context C and set C's uc_link to point to A What happens is that A is exhausted and this will not work as expected 5. swapcontext(3) to C We expect A's function to be executed after C's function returns, but instead exit(3) is called when A's function returns and the whole program terminates normally after serving its second request. -----BEGIN PGP SIGNATURE----- iD8DBQFCrcgJFw6SP/bBpCARAll9AKCPTyMK23v28h8eGKW0LQw7RjrWFgCfWHjR BQEEDOOx/mGG7S38QhqLIW8= =yB1z -----END PGP SIGNATURE-----

3 8

linuxthreads + ucontext = crash
by Michal Trojnara 15 Jun '05

15 Jun '05

Dear Users, It looks like a well known problem: https://listman.redhat.com/archives/phil-list/2003-January/msg00097.html Nice to know. 8-) Best regards, Mike

1 0

Follow up to stunnel w/ zlib not working under windows.
by comsatcat 14 Jun '05

14 Jun '05

Just curious if anyone has stunnel working with zlib compression under windows? Please see my other post titled "Compression (zlib) does not work under windows" for more information. Thanks, Ben

1 0

Setting up Stunnel on Server AND Clients
by Peter Pentes 14 Jun '05

14 Jun '05

G'Day all, I'm having trouble understanding how to incorporate Stunnel into a client/server environment. There is a application running on the server which receives and sends data to various clients. The clients also have a communications application running. None of the apps (on both server and clients) support any form of encryption. So I want to use Stunnel for this. How would I set Stunnel up on the server and also the clients? I can't find an example on stunnel.org that discusses such a scenario. Any help would be great. Cheers. Peter __________________________________ Yahoo! Mail Stay connected, organized, and protected. Take the tour: http://tour.mail.yahoo.com/mailtour.html

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users