[stunnel-users] Stunnel exits with timeout

SP scp.stjohn at gmail.com
Wed Aug 17 22:37:12 CEST 2016


Summary of problem (configuration and log details below):
I am attempting to configure Stunnel to run a pop3s service on our
server so that users can retrieve email securely.
Stunnel is started as a systemctl service.  If I include both the
following in the stunnel.conf:

accept  = mail.myserver.net:995 
connect = localhost:110

then systemctl will exit immediately with:
Service [pop3s]: Each service must define two endpoints
stunnel.service: Control process exited, code=exited status=1 
Failed to start SSL tunnel for network daemons.

If I comment the connect to 110 then it will start and hang then
eventually timeout:
stunnel.service: Failed with result 'timeout'.

Below is my stunnel.conf and log excerpt from the start with the
connect to 110 commented out.

I would greatly appreciate any advice.

---stunnel.conf

setuid = nobody 
setgid = nobody 
 pid = /usr/local/var/lib/stunnel/var/run/stunnel.pid 

foreground = yes 
;debug = info 
debug = 7 
sslVersion = TLSv1.2 
output = /usr/local/var/lib/stunnel/var/log/stunnel.log 
;ciphers = HIGH:MEDIUM:+DH:!SSLv2:!aNULL:+SHA256:+SHA1:+MD5 
ciphers = HIGH:+3DES:+DH:!aNULL:!SSLv2 

transparent = yes 
delay = no 
fips = no 
compression = deflate 
client = no 

[pop3s] 
accept  = mail.myserver.net:995 
;connect = localhost:110 
cert = /etc/stunnel/stunnel.pem 
key = /etc/stunnel/stunnel.pem 
exec = /usr/local/sbin/gnu-pop3d 
execargs = --debug=000 --mdn --timeout=60 --ipv6 

----log excerpt -----
2016.08.17 15:08:55 LOG7[ui]: Clients allowed=500 
2016.08.17 15:08:55 LOG5[ui]: stunnel 5.35 on x86_64-unknown-linux-gnu
platform 
2016.08.17 15:08:55 LOG5[ui]: Compiled/running with OpenSSL 1.0.2h  3
May 2016 
2016.08.17 15:08:55 LOG5[ui]: Threading:PTHREAD Sockets:POLL,IPv6
TLS:ENGINE,FIPS,OCSP,PSK,SNI 
2016.08.17 15:08:55 LOG7[ui]: errno: (*__errno_location ()) 
2016.08.17 15:08:55 LOG5[ui]: Reading configuration from file
/etc/stunnel/stunnel.conf 
2016.08.17 15:08:55 LOG5[ui]: UTF-8 byte order mark not detected 
2016.08.17 15:08:55 LOG7[cron]: Cron thread initialized 
2016.08.17 15:08:55 LOG5[ui]: FIPS mode disabled 
2016.08.17 15:08:55 LOG6[ui]: Compression enabled: 1 method(s) 
2016.08.17 15:08:55 LOG7[ui]: Snagged 64 random bytes from
/dev/urandom 
2016.08.17 15:08:55 LOG7[ui]: PRNG seeded successfully 
2016.08.17 15:08:55 LOG6[ui]: Initializing service [pop3s] 
2016.08.17 15:08:55 LOG6[ui]: Loading certificate from file:
/etc/stunnel/stunnel.pem 
2016.08.17 15:08:55 LOG6[ui]: Certificate loaded from file:
/etc/stunnel/stunnel.pem 
2016.08.17 15:08:55 LOG6[ui]: Loading private key from file:
/etc/stunnel/stunnel.pem 
2016.08.17 15:08:55 LOG6[ui]: Private key loaded from file:
/etc/stunnel/stunnel.pem 
2016.08.17 15:08:55 LOG7[ui]: Private key check succeeded 
2016.08.17 15:08:55 LOG7[ui]: DH initialization 
2016.08.17 15:08:55 LOG7[ui]: Could not load DH parameters from
/etc/stunnel/stunnel.pem 
2016.08.17 15:08:55 LOG6[ui]: Using dynamic DH parameters 
2016.08.17 15:08:55 LOG7[ui]: ECDH initialization 
2016.08.17 15:08:55 LOG7[ui]: ECDH initialized with curve prime256v1 
2016.08.17 15:08:55 LOG7[ui]: SSL options: 0x03004004 (+0x03004000,
-0x00000000) 
2016.08.17 15:08:55 LOG5[ui]: Configuration successful 
2016.08.17 15:08:55 LOG7[ui]: Listening file descriptor created (FD=7) 
2016.08.17 15:08:55 LOG7[ui]: Option SO_REUSEADDR set on accept socket 
2016.08.17 15:08:55 LOG7[ui]: Service [pop3s] (FD=7) bound to
60.62.114.105:995 
2016.08.17 15:08:55 LOG6[cron]: Executing cron jobs 
2016.08.17 15:08:55 LOG7[ui]: Created pid file
/usr/local/var/lib/stunnel/var/run/stunnel.pid 
2016.08.17 15:08:55 LOG5[cron]: Updating DH parameters 
2016.08.17 15:10:01 LOG5[cron]: DH parameters updated 
2016.08.17 15:10:01 LOG6[cron]: Cron jobs completed in 66 seconds 
2016.08.17 15:10:01 LOG7[cron]: Waiting 86334 seconds 
2016.08.17 15:10:25 LOG7[ui]: Found 1 ready file descriptor(s) 
2016.08.17 15:10:25 LOG7[ui]: FD=4 events=0x2001 revents=0x1 
2016.08.17 15:10:25 LOG7[ui]: FD=7 events=0x2001 revents=0x0 
2016.08.17 15:10:25 LOG7[ui]: Dispatching signals from the signal pipe 
2016.08.17 15:10:25 LOG7[ui]: Processing SIGNAL_TERMINATE 
2016.08.17 15:10:25 LOG5[ui]: Terminated 
2016.08.17 15:10:25 LOG7[ui]: Closing service [pop3s] 
2016.08.17 15:10:25 LOG7[ui]: Service [pop3s] closed (FD=7) 
2016.08.17 15:10:25 LOG7[ui]: Service [pop3s] closed 
2016.08.17 15:10:25 LOG7[ui]: removing pid file
/usr/local/var/lib/stunnel/var/run/stunnel.pid




More information about the stunnel-users mailing list