Re: [stunnel-users] Problems when using PSK between a version of stunnel usingopenssl 1.0 and a version of stunnel using openssl 1.1.1 in stunnel-users Digest, Vol 182, Issue 7
Hi Brent
Thank you for your suggestions.
I installed stunnel version 5.55 on the client test side (where the openssl version OpenSSL 1.1.1c is). That has solved the problem.
Kind regards and thanks again for your help,
Hannah Koperberg, de Volksbank N.V., The Netherlands
From: Brent Kimberley [email protected] Sent: woensdag 18 september 2019 18:30 To: [email protected] Subject: Re: [stunnel-users] stunnel-users Digest, Vol 182, Issue 7
psk_find() and psk_server_callback() are marked NOEXPORT.
You can try whitebox - decompile ctx.c:: psk_server_callback() and/or blackbox - breaking the problem into parts to see what works/fails.
Decomposing the problem into parts : a) Two differing stunnel versions and a common openssl library. b) One common stunnel version and two differing openssl libraries.
On Wednesday, September 18, 2019, 11:28:48 a.m. EDT, Brent Kimberley <[email protected]mailto:[email protected]> wrote:
2019.09.16 13:36:28 LOG6[3]: PSK identity not found (session resumption?)
Try dumping the symbols for ctx.c::psk_find(), ssl_lib.c::SSL_get_ex_data(), and ctx.c:: psk_server_callback().
________________________________
Dit e-mailbericht is alleen bestemd voor de geadresseerden. Indien dit bericht niet voor u is bedoeld, wordt u verzocht de afzender hiervan op de hoogte te stellen door het bericht te retourneren en de inhoud niet te gebruiken. This e-mail message is intended to be exclusively for the addressee. If you are not the intended recipient you are kindly requested not to make any use whatsoever of the contents and to notify the sender immediately by returning this e-mail message.
Hi Hannah.You're welcome. Please keep in mind that Michal's unreleased stunnel v5.56 and OpenSSL1.1.1d contain a couple minor severity fixes. https://www.openssl.org/news/openssl-1.1.1-notes.htmlhttps://www.stunnel.org...
On Wednesday, September 25, 2019, 08:18:10 a.m. EDT, Koperberg, J. (Hannah) [email protected] wrote:
Hi Brent
Thank you for your suggestions.
I installed stunnel version 5.55 on the client test side (where the openssl version OpenSSL 1.1.1c is).
That has solved the problem.
Kind regards and thanks again for your help,
Hannah Koperberg, de Volksbank N.V., The Netherlands
From: Brent Kimberley [email protected] Sent: woensdag 18 september 2019 18:30 To: [email protected] Subject: Re: [stunnel-users] stunnel-users Digest, Vol 182, Issue 7
psk_find() and psk_server_callback() are marked NOEXPORT.
You can try whitebox - decompile ctx.c:: psk_server_callback() and/or blackbox - breaking the problem into partsto see what works/fails.
Decomposing the problem into parts :
a) Two differing stunnel versions and a common openssl library.
b) One common stunnel version and two differing openssl libraries.
On Wednesday, September 18, 2019, 11:28:48 a.m. EDT, Brent Kimberley [email protected] wrote:
2019.09.16 13:36:28 LOG6[3]: PSK identity not found (session resumption?)
Try dumping the symbols for ctx.c::psk_find(), ssl_lib.c::SSL_get_ex_data(), and ctx.c:: psk_server_callback().
Dit e-mailbericht is alleen bestemd voor de geadresseerden. Indien dit bericht niet voor u is bedoeld, wordt u verzocht de afzender hiervan op de hoogte te stellen door het bericht te retourneren en de inhoud niet te gebruiken. This e-mail message is intended to be exclusively for the addressee. If you are not the intended recipient you are kindly requested not to make any use whatsoever of the contents and to notify the sender immediately by returning this e-mail message.
-
Brent Kimberley -
Koperberg, J. (Hannah)