Guy, Your suggestion fixed the problem. Thank you!

Regards, Jeff

Guy wrote:

Jeff Salisbury wrote:

...

Greetings, We have been using Stunnel 4.26 to facilitate the sending and receiving of email with an email client that is not SSL enabled. Version 4.26 has been working great. However, when we upgrade to 4.27, we are unable to POP email (we can send email). We did not change our Stunnel.conf file.

Can anyone advise us what we need to do to get 4.27 working? I've included our Stunnel.conf file contents, and the Stunnel log output below.

Try: sslVersion = TLSv1

See below.

Your Modified Configuration File:

##### # GLOBAL OPTIONS

client = yes #output = C:\Documents and Settings\All Users\Application Data\stunnel-log.txt debug = 7 taskbar = yes

sslVersion = TLSv1

# SERVICE-LEVEL OPTIONS

[pop3] accept=995 connect=mail.OurPOP.com:995

[smtp] accept=465 connect=mail.OurSMTP.com:465 # #####

Configuration File Used:

##### # client = yes debug = debug output = _test.log rndbytes = 256 rndfile = t:\tmp\randseed.bin socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1

sslVersion = TLSv1

[YOUR-POP3S] accept=TUNNEL-01:110 connect=216.97.239.60:995

[YOUR-SMTPS] accept=TUNNEL-01:25 connect=216.97.239.60:465 # #####

Stunnel Debug Output Log:

Snagged 256 random bytes from t:\tmp\randseed.bin Wrote 1024 new random bytes to t:\tmp\randseed.bin RAND_status claims sufficient entropy for the PRNG PRNG seeded successfully SSL context initialized for service YOUR-POP3S SSL context initialized for service YOUR-SMTPS stunnel 4.27 on x86-pc-mingw32-gnu with OpenSSL 0.9.8k 25 Mar 2009 Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv6 No limit detected for the number of clients FD 1884 in non-blocking mode SO_REUSEADDR option set on accept socket YOUR-POP3S bound to 127.0.10.1:110 FD 1876 in non-blocking mode SO_REUSEADDR option set on accept socket YOUR-SMTPS bound to 127.0.10.1:25 YOUR-POP3S accepted FD=1860 from 127.0.10.1:1599 Creating a new thread New thread created YOUR-POP3S started FD 1860 in non-blocking mode TCP_NODELAY option set on local socket YOUR-POP3S accepted connection from 127.0.10.1:1599 FD 1836 in non-blocking mode connect_blocking: connecting 216.97.239.60:995 connect_blocking: s_poll_wait 216.97.239.60:995: waiting 10 seconds connect_blocking: connected 216.97.239.60:995 YOUR-POP3S connected remote server from 10.10.10.10:1600 Remote FD=1836 initialized TCP_NODELAY option set on remote socket SSL state (connect): before/connect initialization SSL state (connect): SSLv3 write client hello A SSL state (connect): SSLv3 read server hello A SSL state (connect): SSLv3 read server certificate A SSL state (connect): SSLv3 read server done A SSL state (connect): SSLv3 write client key exchange A SSL state (connect): SSLv3 write change cipher spec A SSL state (connect): SSLv3 write finished A SSL state (connect): SSLv3 flush data SSL state (connect): SSLv3 read finished A 1 items in the session cache 1 client connects (SSL_connect()) 1 client connects that finished 0 client renegotiations requested 0 server connects (SSL_accept()) 0 server connects that finished 0 server renegotiations requested 0 session cache hits 0 session cache misses 0 session cache timeouts SSL connected: new session negotiated Negotiated ciphers: AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1 Socket closed on read SSL write shutdown SSL alert (write): warning: close notify SSL socket closed on SSL_shutdown Socket write shutdown Connection closed: 49 bytes sent to SSL, 90 bytes sent to socket YOUR-POP3S finished (0 left) YOUR-SMTPS accepted FD=1844 from 127.0.10.1:1601 Creating a new thread New thread created YOUR-SMTPS started FD 1844 in non-blocking mode TCP_NODELAY option set on local socket YOUR-SMTPS accepted connection from 127.0.10.1:1601 FD 1836 in non-blocking mode connect_blocking: connecting 216.97.239.60:465 connect_blocking: s_poll_wait 216.97.239.60:465: waiting 10 seconds connect_blocking: connected 216.97.239.60:465 YOUR-SMTPS connected remote server from 10.10.10.10:1602 Remote FD=1836 initialized TCP_NODELAY option set on remote socket SSL state (connect): before/connect initialization SSL state (connect): SSLv3 write client hello A SSL state (connect): SSLv3 read server hello A SSL state (connect): SSLv3 read server certificate A SSL state (connect): SSLv3 read server done A SSL state (connect): SSLv3 write client key exchange A SSL state (connect): SSLv3 write change cipher spec A SSL state (connect): SSLv3 write finished A SSL state (connect): SSLv3 flush data SSL state (connect): SSLv3 read finished A 1 items in the session cache 1 client connects (SSL_connect()) 1 client connects that finished 0 client renegotiations requested 0 server connects (SSL_accept()) 0 server connects that finished 0 server renegotiations requested 0 session cache hits 0 session cache misses 0 session cache timeouts SSL connected: new session negotiated Negotiated ciphers: AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1 Socket closed on read SSL write shutdown SSL alert (write): warning: close notify SSL socket closed on SSL_shutdown Socket write shutdown Connection closed: 78 bytes sent to SSL, 423 bytes sent to socket YOUR-SMTPS finished (0 left)

POP3 Transaction Log:

CONNECT : Looking up host name TUNNEL-01... CONNECT : Host name TUNNEL-01 found CONNECT : Connecting to host TUNNEL-01 [127.0.10.1:110]... CONNECT : Connected to host TUNNEL-01 [127.0.10.1:110] POP REPLY : +OK Hello there. POP SEND : USER username POP REPLY : +OK Password required. POP SEND : PASS ********** POP REPLY : -ERR Login failed. POP SEND : QUIT POP REPLY : +OK Better luck next time. DISCONNECT: Disconnected from server

SMTP Transaction Log:

CONNECT : Looking up host name TUNNEL-01... CONNECT : Host name TUNNEL-01 found CONNECT : Connecting to host TUNNEL-01 [127.0.10.1:25]... CONNECT : Connected to host TUNNEL-01 [127.0.10.1:25] SMTP REPLY: 220-crimson.lunarbreeze.com ESMTP Exim 4.69 #1 Tue, 16 Jun 2009 14:45:25 -0700 SMTP SEND : EHLO computername SMTP REPLY: 250-crimson.lunarbreeze.com Hello 123,123.123.123 [123,123.123.123] SMTP REPLY: 250-SIZE 52428800 SMTP REPLY: 250-PIPELINING SMTP REPLY: 250-AUTH PLAIN LOGIN SMTP REPLY: 250 HELP SMTP SEND : AUTH PLAIN xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx== SMTP REPLY: 535 Incorrect authentication data SMTP SEND : QUIT SMTP REPLY: 221 crimson.lunarbreeze.com closing connection DISCONNECT: Disconnected from server