[stunnel-users] write client hello hang/timeout

. remember.pol at gmail.com
Sat Aug 1 12:19:12 CEST 2009


stunnel4 config
2009.08.01 05:09:29 LOG7[4856:0]: Snagged 64 random bytes from
/home/c7a71k/.rnd
2009.08.01 05:09:29 LOG7[4856:0]: Wrote 1024 new random bytes to
/home/c7a71k/.rnd
2009.08.01 05:09:29 LOG7[4856:0]: RAND_status claims sufficient entropy for
the PRNG
2009.08.01 05:09:29 LOG7[4856:0]: PRNG seeded successfully
2009.08.01 05:09:29 LOG7[4856:0]: Certificate: /etc/stunnel/stunnel.pem
2009.08.01 05:09:29 LOG7[4856:0]: Certificate loaded
2009.08.01 05:09:29 LOG7[4856:0]: Key file: /etc/stunnel/stunnel.pem
2009.08.01 05:09:29 LOG7[4856:0]: Private key loaded
2009.08.01 05:09:29 LOG7[4856:0]: SSL context initialized for service
stunnel
2009.08.01 05:09:29 LOG5[4856:0]: stunnel 4.22 on i686-pc-linux-gnu with
OpenSSL 0.9.8g 19 Oct 2007
2009.08.01 05:09:29 LOG5[4856:0]: Threading:FORK SSL:ENGINE
Sockets:POLL,IPv6
2009.08.01 05:09:29 LOG7[4856:0]: stunnel started
2009.08.01 05:09:29 LOG7[4856:0]: FD 0 in non-blocking mode
2009.08.01 05:09:29 LOG7[4856:0]: FD 1 in non-blocking mode
2009.08.01 05:09:29 LOG7[4856:0]: FD 4 in non-blocking mode
2009.08.01 05:09:29 LOG7[4856:0]: stunnel connecting 212.93.193.72:443
2009.08.01 05:09:29 LOG7[4856:0]: connect_wait: waiting 10 seconds
2009.08.01 05:09:29 LOG7[4856:0]: connect_wait: connected
2009.08.01 05:09:29 LOG5[4856:0]: stunnel connected remote server from
192.168.2.100:47406
2009.08.01 05:09:29 LOG7[4856:0]: Remote FD=4 initialized
2009.08.01 05:09:29 LOG7[4856:0]: SSL state (connect): before/connect
initialization
2009.08.01 05:09:29 LOG7[4856:0]: SSL state (connect): SSLv2 write client
hello A
# (hangs indefinitely)

#here's the config:

client = yes
foreground = yes
debug = 7
cert = /etc/stunnel/stunnel.pem
sslVersion = SSLv2
connect = 212.93.193.72:443
execargs = iceweasel


# I think I'm supposed to get a "read server hello A" back?... But I get
nothing, and iceweasel is *not* launched.
# Anyone know how to overcome this?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20090801/eccad01f/attachment.html>


More information about the stunnel-users mailing list