[stunnel-users] Stunnel help and guidance request

Thu Sep 19 18:05:16 CEST 2019

Thank you Mike! That solved my problem.

Best,

Gerald Shaw

> On Sep 19, 2019, at 1:23 AM, Noonan, M.P. (Mike) <mike.noonan at devolksbank.nl> wrote:
> 
> Hi Gerald,
> 
> I assume you got stunnel from the oss4aix.org site.
> 
> We don't use the freeware openssl, but instead the IBM one:
> 
> [root at duist:/data/O01] lslpp -l | grep openssl
>  openssl.base            1.0.2.1801  COMMITTED  Open Secure Socket Layer
>  openssl.license         1.0.2.1801  COMMITTED  Open Secure Socket License
>  openssl.man.en_US       1.0.2.1801  COMMITTED  Open Secure Socket Layer
>  openssl.base            1.0.2.1801  COMMITTED  Open Secure Socket Layer
> 
> I installed stunnel-5.29 on one of our lpars which I forced with -nodeps:
> rpm -Uhv --nodeps stunnel-5.29-1.aix5.2.ppc.rpm
> 
> It picked up the IBM libs, but had the same problem...
> 
> [root at duist:/data/O01] ldd /usr/bin/stunnel
> /usr/bin/stunnel needs:
>         /usr/lib/threads/libc.a(shr.o)
>         /usr/lib/libpthreads.a(shr_comm.o)
>         /usr/lib/libpthreads.a(shr_xpg5.o)
>         /usr/lib/libcrypto.a(libcrypto.so.1.0.2)
>         /usr/lib/libssl.a(libssl.so.1.0.2)
>         /unix
>         /usr/lib/libcrypt.a(shr.o)
> [root at duist:/data/O01] /usr/bin/stunnel
> Could not load program /usr/bin/stunnel:
> Symbol resolution failed for stunnel because:
>        Symbol strcmp (number 112) is not exported from dependent
>          module /usr/lib/libcrypto.a(libcrypto.so.1.0.2).
>        Symbol memmove (number 137) is not exported from dependent
>          module /usr/lib/libcrypto.a(libcrypto.so.1.0.2).
>        Symbol strncpy (number 142) is not exported from dependent
>          module /usr/lib/libcrypto.a(libcrypto.so.1.0.2).
>        Symbol strcpy (number 169) is not exported from dependent
>          module /usr/lib/libcrypto.a(libcrypto.so.1.0.2).
>        Symbol bcopy (number 245) is not exported from dependent
>          module /usr/lib/libcrypto.a(libcrypto.so.1.0.2).
> 
> I then downloaded and installed stunnel-5.49 from oss4aix.org and installed that version which worked fine..
> 
> [root at duist:/data/O01] /usr/bin/stunnel
> [ ] Clients allowed=31999
> [.] stunnel 5.49 on powerpc-ibm-aix5.2.0.0 platform
> [.] Compiled with OpenSSL 1.0.2p  14 Aug 2018
> [.] Running  with OpenSSL 1.0.2r  26 Feb 2019
> [.] Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI
> [ ] errno: (*_Errno())
> [!] Invalid configuration file name "/opt/freeware/etc/stunnel/stunnel.conf"
> [!] realpath: No such file or directory (2)
> [ ] Deallocating section defaults
> 
> 
> I expect that if you upgrade your freeware openssl to at least 1,0,2r and upgrade stunnel to 5.49 your problem should be solved.
> 
> 
> Met vriendelijke groet,
> 
> Mike Noonan
> 
> From: stunnel-users <mailto:stunnel-users-bounces at stunnel.org> On Behalf Of Gerald Shaw
> Sent: Wednesday, September 18, 2019 11:18 PM
> To: mailto:stunnel-users at stunnel.org
> Subject: [stunnel-users] Stunnel help and guidance request
> 
> Hello all,
> 
> I'm new to the mailing list. I'm trying to run stunnel-5.29-1.ppc, and I'm having issues. I'd appreciate your help (or point me to the solution in the archives).
> 
> OS - AIX 7100-05-03-1846
> 
> /home/shawg# rpm -qa|grep -i openssl
> openssl-1.0.2n-1.ppc
> 
> /home/shawg# ldd `which stunnel`
> /usr/bin/stunnel needs:
>         /usr/lib/libc.a(shr.o)
>         /usr/lib/libpthreads.a(shr_comm.o)
>         /usr/lib/libpthreads.a(shr_xpg5.o)
>         /opt/freeware/lib/libcrypto.a(libcrypto.so.1.0.2)
>         /opt/freeware/lib/libssl.a(libssl.so.1.0.2)
>         /unix
>         /usr/lib/libcrypt.a(shr.o)
> 
> **
> ERROR MESSAGE_-
> 
> /home/shawg# /usr/bin/stunnel
> exec(): 0509-036 Cannot load program /usr/bin/stunnel because of the following errors:
>        0509-130 Symbol resolution failed for stunnel because:
>        0509-136   Symbol strcmp (number 112) is not exported from
>                   dependent module /opt/freeware/lib/libcrypto.a(libcrypto.so.1.0.2).
>        0509-136   Symbol memmove (number 137) is not exported from
>                   dependent module /opt/freeware/lib/libcrypto.a(libcrypto.so.1.0.2).
>        0509-136   Symbol strncpy (number 142) is not exported from
>                   dependent module /opt/freeware/lib/libcrypto.a(libcrypto.so.1.0.2).
>        0509-136   Symbol strcpy (number 169) is not exported from
>                   dependent module /opt/freeware/lib/libcrypto.a(libcrypto.so.1.0.2).
>        0509-136   Symbol bcopy (number 245) is not exported from
>                   dependent module /opt/freeware/lib/libcrypto.a(libcrypto.so.1.0.2).
>        0509-192 Examine .loader section symbols with the
>                 'dump -Tv' command.
> 
> ***
> echo $LIBPATH
> /opt/freeware/lib:/usr/lib
> 
> 
> ________________________________
> 
> Dit e-mailbericht is alleen bestemd voor de geadresseerden. Indien dit bericht niet voor u is bedoeld, wordt u verzocht de afzender hiervan op de hoogte te stellen door het bericht te retourneren en de inhoud niet te gebruiken.
> This e-mail message is intended to be exclusively for the addressee. If you are not the intended recipient you are kindly requested not to make any use whatsoever of the contents and to notify the sender immediately by returning
> this e-mail message.
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at stunnel.org
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users