[stunnel-users] stunnel keeps using SSLv3 even after disabling it

Or Yarimi or at marketspulse.com
Wed Feb 4 11:15:15 CET 2015


I'm using stunnel to communicate with FIX server.
In order to do that, I disabled SSLv2 and SSLv3 and set the sslVersion to

It seems like stunnel keeps trying using SSLv3 handshake, which isn't

This is the configuration:
client = yes
debug = 7
cert = stunnel.pem

; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

; Turning for LMAX
options = NO_SSLv2
options = NO_SSLv3

sslVersion = TLSv1
accept = 40001
connect = fix-ate.lmaxtrader.com:443

stunnel log:
2015.02.04 12:10:31 LOG7[12516]: Service [LMAX-fix-tunnel-DEMO-MktData]
2015.02.04 12:10:31 LOG5[12516]: Service [LMAX-fix-tunnel-DEMO-MktData]
accepted connection from
2015.02.04 12:10:31 LOG6[12516]: s_connect: connecting
2015.02.04 12:10:31 LOG7[12516]: s_connect: s_poll_wait
waiting 10 seconds
2015.02.04 12:10:31 LOG5[12516]: s_connect: connected
2015.02.04 12:10:31 LOG5[12516]: Service [LMAX-fix-tunnel-DEMO-MktData]
connected remote server from
2015.02.04 12:10:31 LOG7[12516]: Remote socket (FD=620) initialized
2015.02.04 12:10:31 LOG6[12516]: SNI: sending servername:
2015.02.04 12:10:31 LOG7[12516]: SSL state (connect): before/connect
2015.02.04 12:10:31 LOG7[12516]: SSL state (connect): SSLv3 write client
hello A

Already burned around 4 hours understanding what I'm doing wrong, will be
glad if you could help me.

Thanks in advance,


This e-mail and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. 
If you have received this email in error, please notify the 
sender immediately by replying to this message, and delete the original 
message from your system without making a copy. 
This e-mail is attributed to the sender and does not necessarily reflect 
the view of Markets Pulse P.S. Ltd. or any affiliate.


Please consider the environment before printing this email.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20150204/fc268a14/attachment.html>

More information about the stunnel-users mailing list