<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Hi,<br><br>I am trying to use Stunnel to provide HTTPS access to a web site (my router configurations). That is, stunnel is used to accept HTTPS connection and it forwards the request using HTTP to the web site. The problem seems to be that one connection is opened and it performs an HTTP GET. Afterwards Stunnel does not accept any more connections and I have to restart. I'm not sure what I'm doing wrong. The strange thing I notice is that service router is finished with -1. What does minus one mean?<br><br>I am using Firefox as the client. What I see is that Firefox is trying to load the page. Using wireshark, I was able to see that all the HTML data from the web page was loaded but Firefox was having trouble performing HTTP GET for the images on the site. I need to restart Stunnel in order to have another connection open. This is confirmed where I made a test by restarting Stunnel and then I tried to just load images from the Web site: e.g. https://192.168.1.88:8880/image1.jpg and https://192.168.1.88:8880/image2.jpg. I get image1.jpg but Firefox can't access image2.jpg, unless I restart then get image2. <br><br>Here's the logs showing that I am able to make one access to the site.<br>2010.03.16 00:47:41 LOG5[3266:1024]: stunnel 4.31 on armv5tejl-unknown-linux-gnu with OpenSSL 0.9.8k 25 Mar 2009<br>2010.03.16 00:47:41 LOG5[3266:1024]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6<br>2010.03.16 00:47:41 LOG7[3266:1024]: Cleaning up the signal pipe<br>2010.03.16 00:47:41 LOG7[3266:1024]: Signal pipe is empty<br>2010.03.16 00:47:46 LOG7[3266:1024]: Service router accepted FD=0 from 192.168.1.80:2821<br>2010.03.16 00:47:46 LOG7[3268:1026]: Service router started<br>2010.03.16 00:47:46 LOG7[3268:1026]: FD=0 in non-blocking mode<br>2010.03.16 00:47:46 LOG7[3268:1026]: Option TCP_NODELAY set on local socket<br>2010.03.16 00:47:46 LOG5[3268:1026]: Service router accepted connection from 192.168.1.80:2821<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): before/accept initialization<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 read client hello A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 write server hello A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 write certificate A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 write server done A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 flush data<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 read client key exchange A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 read finished A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 write change cipher spec A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 write finished A<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL state (accept): SSLv3 flush data<br>2010.03.16 00:47:46 LOG7[3268:1026]: 1 items in the session cache<br>2010.03.16 00:47:46 LOG7[3268:1026]: 0 client connects (SSL_connect())<br>2010.03.16 00:47:46 LOG7[3268:1026]: 0 client connects that finished<br>2010.03.16 00:47:46 LOG7[3268:1026]: 0 client renegotiations requested<br>2010.03.16 00:47:46 LOG7[3268:1026]: 1 server connects (SSL_accept())<br>2010.03.16 00:47:46 LOG7[3268:1026]: 1 server connects that finished<br>2010.03.16 00:47:46 LOG7[3268:1026]: 0 server renegotiations requested<br>2010.03.16 00:47:46 LOG7[3268:1026]: 0 session cache hits<br>2010.03.16 00:47:46 LOG7[3268:1026]: 0 external session cache hits<br>2010.03.16 00:47:46 LOG7[3268:1026]: 1 session cache misses<br>2010.03.16 00:47:46 LOG7[3268:1026]: 0 session cache timeouts<br>2010.03.16 00:47:46 LOG6[3268:1026]: SSL accepted: new session negotiated<br>2010.03.16 00:47:46 LOG6[3268:1026]: Negotiated ciphers: AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1<br>2010.03.16 00:47:46 LOG7[3268:1026]: FD=9 in non-blocking mode<br>2010.03.16 00:47:46 LOG6[3268:1026]: connect_blocking: connecting 192.168.1.1:80<br>2010.03.16 00:47:46 LOG7[3268:1026]: connect_blocking: s_poll_wait 192.168.1.1:80: waiting 10 seconds<br>2010.03.16 00:47:46 LOG5[3268:1026]: connect_blocking: connected 192.168.1.1:80<br>2010.03.16 00:47:46 LOG5[3268:1026]: Service router connected remote server from 192.168.1.88:1133<br>2010.03.16 00:47:46 LOG7[3268:1026]: Remote FD=9 initialized<br>2010.03.16 00:47:46 LOG7[3268:1026]: Option TCP_NODELAY set on remote socket<br>2010.03.16 00:47:46 LOG7[3268:1026]: Socket closed on read<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL write shutdown<br>2010.03.16 00:47:46 LOG7[3268:1026]: SSL alert (write): warning: close notify<br>2010.03.16 00:47:46 LOG6[3268:1026]: SSL_shutdown successfully sent close_notify<br>2010.03.16 00:47:46 LOG6[3268:1026]: s_poll_wait timeout: connection close<br>2010.03.16 00:47:46 LOG5[3268:1026]: Connection closed: 4675 bytes sent to SSL, 445 bytes sent to socket<br>2010.03.16 00:47:46 LOG7[3268:1026]: Service router finished (-1 left)<br><br>============<br><br>Finally here's my stunnel.conf:<br>cert = /mnt/HD_a2/ffp/etc/stunnel/stunnel.pem<br>sslVersion = SSLv3<br>pid = /stunnel.pid<br><br>; performance tunings<br>socket = l:TCP_NODELAY=1<br>socket = r:TCP_NODELAY=1<br><br>; debugging stuff (may useful for troubleshooting)<br>debug = 7<br>output = /ffp/etc/stunnel/stunnel.log<br><br>; service-level configuration<br>[router]<br>accept = 8880<br>connect = 192.168.1.1:80<br>TIMEOUTclose = 0<br><br>Thank you very much for any help you can provide.<br><br>Rick<br> <br /><hr />Live connected with Messenger on your phone <a href='http://go.microsoft.com/?linkid=9712957' target='_new'>Learn more.</a></body>
</html>