[stunnel-users] Session is active but I cannot connect

daninho dj daninho.dj at gmail.com
Thu Apr 9 17:30:55 CEST 2015


It was typo sorry. The settings on the server are:

[test]
accept = 2406
connect = 2404

and on the client:

[jdbc]
client = yes
accept = 127.0.0.1:2404
connect = my_server_name:2406


I'm trying to start the service on the server and it's not working:


/etc/init.d/stunnel start
Starting stunnel (SSL tunnel) startproc:  exit status of parent of
/usr/sbin/stunnel: 1
  please see /var/log/rc.stunnel.log for details

      failed


Regards,



On Thu, Apr 9, 2015 at 5:04 PM, Carter Browne <cbcs at comcast.net> wrote:

>  In your before setting, your client should have  been to connect to your
> test server:
>
> [jdbc]
> client = yes
> accept = 127.0.0.1:2404
> connect=my_server_name:2404
>
> In your after setting, the accept and connect ports cannot be the same
> port.
>
>
>
>
> On 4/9/2015 10:51 AM, daninho dj wrote:
>
> Hi Jose,
>
>  Thanks for mail. The problem is that when I change the accept port on
> the server, stunnel doesn't start:
>
>  *Before:*
>
>  *Server:*
>
>  [test]
> accept = 2404
> connect = 2406
>
>  *Client:*
>
>  [jdbc]
> client = yes
> accept = 127.0.0.1:2404
> connect = *my_server_name*:2406
>
>  *After:*
>
>  I edited the stunnel.conf on the server:
>
>  [test]
> accept = 2406
> connect = 2406
>
>  Then trying to start the service:
>
>  */etc/init.d/stunnel start*
> *Starting stunnel (SSL tunnel) startproc:  exit status of parent of
> /usr/sbin/stunnel: 1*
> *  please see /var/log/rc.stunnel.log for details
>
>         failed*
>
>  /var/log/rc.stunnel.log is empty but in the log specified in the
> stunnel.conf I have the following:
>
>  tail -10 /var/log/stunnel/stunnel.log
> 2015.04.09 16:42:36 LOG5[22524:139805264570112]: Threading:PTHREAD
> SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
> 2015.04.09 16:42:36 LOG6[22524:139805264570112]: file ulimit = 262144 (can
> be changed with 'ulimit -n')
> 2015.04.09 16:42:36 LOG6[22524:139805264570112]: poll() used - no
> FD_SETSIZE limit for file descriptors
> 2015.04.09 16:42:36 LOG5[22524:139805264570112]: 128000 clients allowed
> 2015.04.09 16:42:36 LOG7[22524:139805264570112]: FD 10 in non-blocking mode
> 2015.04.09 16:42:36 LOG7[22524:139805264570112]: FD 11 in non-blocking mode
> 2015.04.09 16:42:36 LOG7[22524:139805264570112]: FD 12 in non-blocking mode
> 2015.04.09 16:42:36 LOG7[22524:139805264570112]: SO_REUSEADDR option set
> on accept socket
> 2015.04.09 16:42:36 LOG3[22524:139805264570112]: Error binding test to
> 0.0.0.0:2406
> 2015.04.09 16:42:36 LOG3[22524:139805264570112]: bind: Address already in
> use (98)
>
>
>  Same thing happens when I try to change the ports on the client. Any
> idea how this problem can be solved?
>
>  Thanks and regards,
> Daninho
>
>
>
>
>
> On Thu, Apr 9, 2015 at 4:12 PM, <josealf at rocketmail.com> wrote:
>
>>
>> The accept port on the server Config must be the same as the connect port
>> on the client config.
>> The connect port on the server must be the port used by the
>> application/service you try to secure, usually bound to the loopback
>> interfase, as you probably don't want to allow unsecure connections.
>> On the client the accept port is the port your client application will
>> connect to.
>>
>> Hope this helps to clarify a bit.
>>
>> Regards
>>
>> -----Original Message-----
>> From: daninho dj <daninho.dj at gmail.com>
>> Sender: "stunnel-users" <stunnel-users-bounces at stunnel.org>
>> Date: Thu, 9 Apr 2015 14:28:25
>> To: <stunnel-users at stunnel.org>
>> Subject: [stunnel-users] Session is active but I cannot connect
>>
>> _______________________________________________
>> stunnel-users mailing list
>> stunnel-users at stunnel.org
>> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
>>
>
>
>
>  --
> daninho <http://daninhodj.com>
>
>
> _______________________________________________
> stunnel-users mailing liststunnel-users at stunnel.orghttps://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
>
>
> --
> Carter Brownecbrowne at cbcs-usa.com
>
>


-- 
daninho <http://daninhodj.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20150409/9d1600f1/attachment-0001.html>


More information about the stunnel-users mailing list