[stunnel-users] stunnel: SSL routinesdecryption failed or bad record mac

Wed Mar 13 21:12:40 CET 2013

Hello Everyone,

I updated to the latest version of stunnel and openssl and am still
getting a lot of decryption fails.

stunnel: SSL routines:SSL3_GET_RECORD:decryption failed or bad record mac

and a few times it just segfaults:
[937987.314573] stunnel: segfault at 7f6164025000 ip 00007f616d8b5adc
sp 00007f616e6a9af0 error 4 in libcrypto.so.1.0.0[7f616d84a000+19f000]

stunnel 4.54 on x86_64-unknown-linux-gnu platform
Compiled with OpenSSL 1.0.1e 11 Feb 2013
Running  with OpenSSL 1.0.1 14 Mar 2012

Is there any way to avoid these errors?

I limited my cipher set to just RC4-SHA after seeing that there is an
issue even in openssl 1.01e-1 for e_aes_cbc_hmac_sha1.c
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678353

Appreciate your help.

Thanks,
Kishore