<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>Protocol using Connect</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">I am trying to use the protocol entries in the config file as shown below (xyz substituted to protect employer & vendor). Below is the log. Stunnel abends as it is trying to authenticate to our corporate proxy. The network guys are seeing the attempt to authenticate but it does not appear to complete. Any thoughts?</FONT></P>
<P><FONT SIZE=2 FACE="Arial">key=maxstpb.crt</FONT>
<BR><FONT SIZE=2 FACE="Arial">debug=7</FONT>
<BR><FONT SIZE=2 FACE="Arial">output=stunnel.log</FONT>
<BR><FONT SIZE=2 FACE="Arial">client=yes</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">[MarketAxess]</FONT>
<BR><FONT SIZE=2 FACE="Arial">accept=127.0.0.1:12345</FONT>
<BR><FONT SIZE=2 FACE="Arial">delay=yes</FONT>
<BR><FONT SIZE=2 FACE="Arial">TIMEOUTbusy=120</FONT>
<BR><FONT SIZE=2 FACE="Arial">TIMEOUTconnect=120</FONT>
<BR><FONT SIZE=2 FACE="Arial">connect=xyz.xyz.com:80</FONT>
<BR><FONT SIZE=2 FACE="Arial">protocol=connect</FONT>
<BR><FONT SIZE=2 FACE="Arial">protocolHost=xyz.xyz.com:443</FONT>
<BR><FONT SIZE=2 FACE="Arial">protocolCredentials=xyz:xyz</FONT>
</P>
<BR>
<P><FONT SIZE=2 FACE="Arial">2006.08.21 15:13:24 LOG5[2520:1312]: stunnel 4.15 on x86-pc-mingw32-gnu with </FONT>
<BR><FONT SIZE=2 FACE="Arial">OpenSSL 0.9.7i 14 Oct 2005</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:13:24 LOG5[2520:1312]: Threading:WIN32 SSL:ENGINE </FONT>
<BR><FONT SIZE=2 FACE="Arial">Sockets:SELECT,IPv4</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:13:24 LOG5[2520:3184]: No limit detected for the number of clients</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:13:24 LOG7[2520:3184]: FD 192 in non-blocking mode</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:13:24 LOG7[2520:3184]: SO_REUSEADDR option set on accept socket</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:13:24 LOG7[2520:3184]: MarketAxess bound to 127.0.0.1:12345</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:3184]: MarketAxess accepted FD=200 from </FONT>
<BR><FONT SIZE=2 FACE="Arial">127.0.0.1:4200</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:3184]: Creating a new thread</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:3184]: New thread created</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: MarketAxess started</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: FD 200 in non-blocking mode</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG5[2520:2560]: MarketAxess connected from 127.0.0.1:4200</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: FD 416 in non-blocking mode</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: MarketAxess connecting xyz.xyz.xyz.xyz:80</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: connect_wait: waiting 120 seconds</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: connect_wait: connected</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: Remote FD=416 initialized</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG5[2520:2560]: Negotiations for connect (client side) </FONT>
<BR><FONT SIZE=2 FACE="Arial">started</FONT>
<BR><FONT SIZE=2 FACE="Arial">2006.08.21 15:14:00 LOG7[2520:2560]: -> CONNECT xyz.xyz.com:443 HTTP/1.1</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Alan R. Hutchison</FONT>
<BR><FONT COLOR="#808080" SIZE=2 FACE="Arial">515-362-1272</FONT>
</P>
<BR>
<pre>
-----Message Disclaimer-----
This e-mail message is intended only for the use of the individual or
entity to which it is addressed, and may contain information that is
privileged, confidential and exempt from disclosure under applicable law.
If you are not the intended recipient, any dissemination, distribution or
copying of this communication is strictly prohibited. If you have
received this communication in error, please notify us immediately by
reply email to Connect@principal.com and delete or destroy all copies of
the original message and attachments thereto. Email sent to or from the
Principal Financial Group or any of its member companies may be retained
as required by law or regulation.
Nothing in this message is intended to constitute an Electronic signature
for purposes of the Uniform Electronic Transactions Act (UETA) or the
Electronic Signatures in Global and National Commerce Act ("E-Sign")
unless a specific statement to the contrary is included in this message.
While this communication may be used to promote or market a transaction
or an idea that is discussed in the publication, it is intended to provide
general information about the subject matter covered and is provided with
the understanding that The Principal is not rendering legal, accounting,
or tax advice. It is not a marketed opinion and may not be used to avoid
penalties under the Internal Revenue Code. You should consult with
appropriate counsel or other advisors on all matters pertaining to legal,
tax, or accounting obligations and requirements.
</pre></BODY>
</HTML>