[stunnel-users] stunnel 5.37 released

Fri Nov 11 21:03:43 CET 2016

Hi Mike,

I'm facing three compilation issues on MacOS:

#1. Compiling stunnel with OpenSSL 1.1.x leads to stunnel getting stuck on /dev/null at launch without any apparent reason (./stunnel --version or ./stunnel --help, nothing works, the process doesn't output anything at all)

sudo dtruss ./src/stunnel --version
[...]
mprotect(0x10720D000, 0x88, 0x3)		 = 0 0
mprotect(0x10720D000, 0x88, 0x1)		 = 0 0
issetugid(0x10720D000, 0x88, 0x1)		 = 0 0
getpid(0x10720D000, 0x88, 0x1)		 = 29397 0
stat64("/AppleInternal/XBS/.isChrooted\0", 0x7FFF58C86D38, 0x1)		 = -1 Err#2
stat64("/AppleInternal\0", 0x7FFF58C86CA8, 0x1)		 = -1 Err#2
csops(0x72D5, 0x7, 0x7FFF58C867C0)		 = -1 Err#22
sysctl(0x7FFF58C86B80, 0x4, 0x7FFF58C868F8)		 = 0 0
csops(0x72D5, 0x7, 0x7FFF58C860B0)		 = -1 Err#22
proc_info(0x2, 0x72D5, 0x11)		 = 56 0
open("/dev/null\0", 0x2, 0x106F78D00)		 = 3 0

#2. Since stunnel version 5.35 the zlib dynamic loader needed by OpenSSL has been removed (in configure.ac). This line is missing:

AC_SEARCH_LIBS([inflateEnd], [z])

Leading to the following issue at compilation (when stunnel is compiled with zlib support):

Undefined symbols for architecture x86_64:
  "_deflate", referenced from:
      _zlib_stateful_compress_block in libcrypto.a(c_zlib.o)
      _bio_zlib_write in libcrypto.a(c_zlib.o)
      _bio_zlib_ctrl in libcrypto.a(c_zlib.o)
  "_deflateEnd", referenced from:
      _zlib_stateful_finish in libcrypto.a(c_zlib.o)
      _bio_zlib_free in libcrypto.a(c_zlib.o)
  "_deflateInit_", referenced from:
      _zlib_stateful_init in libcrypto.a(c_zlib.o)
      _bio_zlib_write in libcrypto.a(c_zlib.o)
  "_inflate", referenced from:
      _zlib_stateful_expand_block in libcrypto.a(c_zlib.o)
      _bio_zlib_read in libcrypto.a(c_zlib.o)
  "_inflateEnd", referenced from:
      _zlib_stateful_finish in libcrypto.a(c_zlib.o)
      _bio_zlib_free in libcrypto.a(c_zlib.o)
  "_inflateInit_", referenced from:
      _zlib_stateful_init in libcrypto.a(c_zlib.o)
      _bio_zlib_read in libcrypto.a(c_zlib.o)
  "_zError", referenced from:
      _bio_zlib_write in libcrypto.a(c_zlib.o)
      _bio_zlib_read in libcrypto.a(c_zlib.o)
      _bio_zlib_ctrl in libcrypto.a(c_zlib.o)
ld: symbol(s) not found for architecture x86_64
collect2: error: ld returned 1 exit status
make[2]: *** [stunnel] Error 1
make[1]: *** [all] Error 2
make: *** [all-recursive] Error 1

#3. When supplying the option "--with-ssl=" and "--enable-static --disable-shared", if the lib/ openssl folder contains dynamic libraries *.dylib along with the static libraries *.a, stunnel will compile thinking it should use the dynamic openssl library... Which doesn't make sense since the option "--enable-static" should enforce the use of static libraries. Manually removing the *.dylib files and leaving only the *.a files of openssl resolves the issue and integrates openssl within stunnel. Compiling openssl with the "no-shared" option should work as well.

I think #1 is the most important to look into atm, since it prevents stunnel from being compiled on OSX with the latest stable OpenSSL version.

Please let me know.

Regards,

Thireus (thireus at gmail.com <mailto:thireus at gmail.com>)

> Le 7 Nov 2016 à 00:53, Michał Trojnara <Michal.Trojnara at stunnel.org> a écrit :
> 
> Dear Users,
> 
> I have released version 5.37 of stunnel.
> 
> Version 5.37, 2016.11.06, urgency: MEDIUM
> * Bugfixes
>  - OpenSSL DLLs updated to version 1.0.2j (stops crashes).
>  - The default SNI target (not handled by any slave service)
>    is handled by the master service rather than rejected.
>  - Removed thread synchronization in the FORK threading model.
> 
> Home page: https://www.stunnel.org/
> Download:  https://www.stunnel.org/downloads.html
> 
> SHA-256 hashes:
> d0e3530e3effc64fdec792c71791d4937c6b8bd3b9ea4895c6bb6526dcd0d241
> stunnel-5.37.tar.gz
> b1015afdfc536312b9e3556483c9bfeefd9e29d6f483d305459033272adcf4ad
> stunnel-5.37-installer.exe
> 4bda9b0116676fec7533b3c1e40b9d24f0722e6317c59be4831c19102f4a925c
> stunnel-5.37-android.zip
> 
> Best regards,
>    Mike
> 
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at stunnel.org
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20161112/040f268c/attachment.html>