stunnel-users

3306 discussions

long delay to close the ssl session ?
by gary ng 04 Mar '05

04 Mar '05

Hi, I am using stunnel to wrap SSL around SWAT. Everything works fine except that it takes a very long delay for the browser to see that the page has already been transmitted completely(in other words, the other end has closed). I observed this behaviour with both 3.x and 4.x stunnel. Looking through the log, I see that it takes exactly one minute from the start of the session till the session is closed, seems to be some parameter within stunnel to hold the session. I tried both inetd as well as stand alone stunnel mode and both behave the same as well. Is this an issue with SWAT or stunnel ? If I just use plain SWAT through inetd, I don't see this behaviour. thanks for any help in advance. gary __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

compilation errors
by Greg Matthews 03 Mar '05

03 Mar '05

Anyone here managed to build stunnel for Irix? it seems socklen_t is undefined as a type on this OS (and also older versions of solaris). I have found a possible solution here: http://sprg.ssl.berkeley.edu/~fastops/ITOS/portable/socklen$_t.html but I need to know what type this identifier is supposed to be. any help? GREG -- Greg Matthews iTSS Wallingford 01491 692445

2 4

Naive question: will stunnel connect dynamically?
by Duncan Murdoch 02 Mar '05

02 Mar '05

I currently use openssh to open a tunnel between my laptop and my POP3 server, but the tunnel keeps locking up. (I think it's a server problem, or an intermittent line problem, because it happens with both openssh and Putty.) What I'd like is a program that would open the tunnel only as needed, so I can get the mail, and let the tunnel close. Can stunnel do this? More generally, is there a quick summary somewhere on the relative benefits of stunnel's use of SSL versus an SSH approach? Duncan Murdoch

1 0

Windows XP Pro as a client of Remote Dekstop via stunnel
by Jacek Baszkiewicz 02 Mar '05

02 Mar '05

Hi! I'm currently working (without success) on such problem: I have to connect via Stunnel to Windows Server Remote Desktop from workstation with Windows XP Proffesional. When I refer to the local port handled by stunnel, Windows doesn't let me go go further, because it thinks that I'm trying to use local Remote Dekstop and prints: "You are already connected to this machine" (there can be only one connection through RD) . Is there any workaround for this problem, namely, to use secure connection via Stunnel to Remote Dekstop on XP Pro client? This is my config: client=yes cert = stunnel.pem [ts] accept=localhost:3389 connect=remote_ip:443

5 4

PEM routines:PEM_read_bio Problem
by Metal Gear 02 Mar '05

02 Mar '05

Hi all, i was configuring my syslog-ng server with stunnel and it worked fine for somedays but after that i upgraded to new SSL libraries (OpenSSL 0.9.7e) from (OpenSSL 0x0090701f) then i m getting this "stunnel[2480]: SSL_CTX_use_RSAPrivateKey_file: 906D06C: error:0906D06C:PEM routines:PEM_read_bio" error (i have given the link of stunnel binary in rc.local, to start at boot time, at i get this error in logs) i m using stunnel (stunnel 4.07). Can anyone has any idea about it. Thanks

1 0

verify = 3 error with certificate client
by Humberto Morell 01 Mar '05

01 Mar '05

Hello List I have stunnel 4.7 In the messages of the list I have not seen solution to my problem. This is VERIFY ERROR ONLY MY: no cert stunnel.log in Server ################## 2005.02.25 07:55:07 LOG5[2501:1076546480]: VERIFY OK: depth=1, /C=CU/ST=Ciudad Habana/L=Centro Habana/O=Segurmatica/OU=Agencia de Certificacion/CN=Segurmatica/emailAddress=ca(a)segurmatica.cu 2005.02.25 07:55:07 LOG4[2501:1076546480]: VERIFY ERROR ONLY MY: no cert for /C=CU/ST=Ciudad Habana/L=Centro Habana/O=Ministerio Informatica y Comunicaciones/OU=Segurmatica/CN=Humberto Morell/emailAddress=morell(a)seg.inf.cu 2005.02.25 07:55:07 LOG7[2501:1076546480]: SSL alert (write): fatal: certificate unknown ############# stunnel.conf in Server ############## #chroot = /var/lib/stunnel/ verify = 3 CApath = /etc/stunnel/certdb # or simply use CAfile instead: #CAfile = /etc/stunnel/certs.pem CAfile = /etc/stunnel/acsegurmatica.crt #cert = /etc/stunnel/stunnel.pem cert = /etc/stunnel/certstunnel.pem ################# File in /etc/stunnel ############### certdb morell.pem stunnel.prueba.pem certstunnel.pem stunnel.conf acsegurmatica.crt morell.crt stunnel.log certclient morell.key stunnel.pem ############### Link in /etc/stunnel/certdb ############### drwxr-xr-x 2 root root 176 Feb 25 11:06 . drwx------ 4 root root 472 Feb 25 10:52 .. lrwxrwxrwx 1 root root 24 Feb 25 11:00 2307a3fe.0 -> /etc/stunnel/stunnel.pem lrwxrwxrwx 1 root root 30 Feb 25 11:01 3f5b7ca8.0 -> /etc/stunnel/acsegurmatica.crt lrwxrwxrwx 1 root root 23 Feb 25 11:03 3fb3183e.0 -> /etc/stunnel/morell.pem lrwxrwxrwx 1 root root 28 Feb 25 11:06 d14abd18.0 -> /etc/stunnel/certstunnel.pem ################# client in Windows stunnel.conf ############## client = yes cert = d:\morell.pem debug = 7 output = d:\stunnel.log [lsd] accept = 9595 connect = 10.10.1.83:9500 [ssh] accept = 2222 connect = 10.10.1.83:9522 ##################### Note: I don't use chroot I have try, but idem error with. File morell.pem only client certificate and other time file morell.pem Key private crl Certificate With verify = 2 all is ok Please help Best regards Morell

3 3

stunnel woes under HPUX 10.20
by foner-stunnel＠media.mit.edu 28 Feb '05

28 Feb '05

[Please keep me CC'ed on replies! I'm not on any stunnel lists.] Stunnel 4.07 and 4.08 don't build under HPUX 10.20. 4.06 appears to build, but doesn't appear to work---with a config file like this, running on the local host: pid = /usr/local/var/stunnel/stunnel.pid client = yes foreground = yes # debug = debug [pop3s] accept = 110 connect = our-pop-host:995 ...and an attempt like this, using (for instance) Emacs 21.4a's movemail: movemail po:foner:localhost NEWMAIL [the-password] ...I get an infinite hang. Enabling debugging causes stunnel to spit out an infinite stream of a single line at maximum rate, and seems unaffected by whether I'm trying to connect to it or not: # stunnel test-stunnel.conf 1900.01.00 00:00:00 LOG5[9738:0]: stunnel 4.06 on hppa1.1-hp-hpux10.20 FORK+POLL with OpenSSL 0.9.7e 25 Oct 2004 1900.01.00 00:00:00 LOG7[9738:0]: Snagged 64 random bytes from /users/foner/.rnd 1900.01.00 00:00:00 LOG7[9738:0]: Wrote 1024 new random bytes to /users/foner/.rnd 1900.01.00 00:00:00 LOG7[9738:0]: RAND_status claims sufficient entropy for the PRNG 1900.01.00 00:00:00 LOG6[9738:0]: PRNG seeded successfully 1900.01.00 00:00:00 LOG6[9738:0]: file ulimit = 60 (can be changed with 'ulimit -n') 1900.01.00 00:00:00 LOG6[9738:0]: poll() used - no FD_SETSIZE limit for file descriptors 1900.01.00 00:00:00 LOG5[9738:0]: 27 clients allowed 1900.01.00 00:00:00 LOG7[9738:0]: FD 3 in non-blocking mode 1900.01.00 00:00:00 LOG7[9738:0]: FD 4 in non-blocking mode 1900.01.00 00:00:00 LOG7[9738:0]: FD 5 in non-blocking mode 1900.01.00 00:00:00 LOG7[9738:0]: SO_REUSEADDR option set on accept socket 1900.01.00 00:00:00 LOG7[9738:0]: pop3s bound to 0.0.0.0:110 1900.01.00 00:00:00 LOG7[9738:0]: Created pid file /usr/local/var/stunnel/stunnel.pid 1900.01.00 00:00:00 LOG6[9738:0]: daemon_loop: s_poll_wait: Invalid argument (22) 1900.01.00 00:00:00 LOG6[9738:0]: daemon_loop: s_poll_wait: Invalid argument (22) 1900.01.00 00:00:00 LOG6[9738:0]: daemon_loop: s_poll_wait: Invalid argument (22) 1900.01.00 00:00:00 LOG6[9738:0]: daemon_loop: s_poll_wait: Invalid argument (22) [ . . . and forever more . . . ] I can't imagine that this is supposed to be how debug works, since it's totally useless for debugging if it spits out the same line as fast as it can. I'm running the stunnel as root, and netstat seems to show that it's bound to port 110, but doesn't seem to indicate any outbound connection from stunnel to our pop host after I invoke movemail. I have no idea if versions before 4.06 work; I haven't tried. Sure, this is an old OS, but zillions of other things, including the entire GNU toolchain, seem to work on it, so stunnel should, too. Builds for all three versions I've tried may be found in at the following URLs. Note that 4.07 and 4.08 fail on different files, but in essentially the same way. http://foner.www.media.mit.edu/people/foner/Sys/stunnel-4.06.build http://foner.www.media.mit.edu/people/foner/Sys/stunnel-4.07.build http://foner.www.media.mit.edu/people/foner/Sys/stunnel-4.08.build I've done some websearching, and I've searched the stunnel archives at mirt.net, but haven't found anything relevant. Any clues? Thanks...

5 9

stunnel logging problem
by Brian T 28 Feb '05

28 Feb '05

Hi, I work for a company which has a custom embedded Linux platform, and have been working with stunnel for some time but have never seen this problem. I have seen it with stunnel 4.04 and 4.07, which is compiled on a Redhat 7.2ish platform, but newer SSL libraries. (below my sig is the stunnel info). Basically I use a config file, but when debug= and output= is commented out, stunnel seems to cause a problem which resets the embedded unit. If I uncomment them both and use output=/var/log/stunnel.log ( or /dev/null ) everything works fine. Not sure where to look for the problem that is causing this since I can't even get a core dump. I looged in s_log() but nothing stuck out as being wrong. Thanks for any help you can lend, -Brian [root@JBMgateway-v63 /]# stunnel -version stunnel 4.07 on i486-pc-linux-gnu PTHREAD+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7d 17 Mar 2004 Global options cert = /etc/stunnel/stunnel.pem ciphers = ALL:!ADH:+RC4:@STRENGTH debug = 5 key = /etc/stunnel/stunnel.pem pid = /var/run/stunnel.pid RNDbytes = 64 RNDfile = /dev/urandom RNDoverwrite = yes session = 300 seconds verify = none Service-level options TIMEOUTbusy = 300 seconds TIMEOUTclose = 60 seconds TIMEOUTconnect = 10 seconds TIMEOUTidle = 43200 seconds [root@JBMgateway-v63 /]# uname -a Linux JBMgateway-v63 2.4.20 #1729 Wed Jan 26 17:38:15 CST 2005 i486 unknown [root@JBMgateway-v63 /]# ls -al /lib/libssl.so.* -rwxr-xr-x 1 root root 210452 Jan 26 18:47 /lib/libssl.so.0.9.7 lrwxrwxrwx 1 root root 20 Jan 26 18:47 /lib/libssl.so.2 -> /lib/libssl.so.0.9.7 [root@JBMgateway-v63 /]# cat /etc/stunnel/stunnel.conf # Some debugging stuff debug = 6 output = /var/log/stunnel.log #output = /dev/null foreground = yes # Use it for client mode client = yes [SampleGroup] accept = 443 connect = x.x.x.x:6660

1 0

PEM routines:PEM_read_bio Problem
by Metal Gear 28 Feb '05

28 Feb '05

1 0

PEM routines:PEM_read_bio Problem
by Metal Gear 28 Feb '05

28 Feb '05

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users