<div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial"><DIV>The following errors are generated during connection without fips on:</DIV>
<DIV> </DIV>
<DIV>2012.02.29 19:11:48 LOG6[13546:139687476688640]: SSL accepted: new session negotiated<BR>2012.02.29 19:11:48 LOG6[13546:139687476688640]: Negotiated ciphers: DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1<BR>2012.02.29 19:11:48 LOG6[13546:139687476688640]: Compression: zlib compression, expansion: zlib compression<BR>2012.02.29 19:11:48 LOG6[13546:139687476688640]: connect_blocking: connecting 127.0.0.1:30010<BR>2012.02.29 19:11:48 LOG7[13546:139687476688640]: connect_blocking: s_poll_wait 127.0.0.1:30010: waiting 10 seconds<BR>2012.02.29 19:11:48 LOG5[13546:139687476688640]: connect_blocking: connected 127.0.0.1:30010<BR>2012.02.29 19:11:48 LOG5[13546:139687476688640]: Service 3proxy connected remote server from 127.0.0.1:52872<BR>2012.02.29 19:11:48 LOG7[13546:139687476688640]: Remote FD=8 initialized<BR>2012.02.29 19:11:48 LOG7[13546:139687476688640]: Socket closed on read<BR>2012.02.29 19:11:48 LOG7[13546:139687476688640]: Sending close_notify alert<BR>2012.02.29 19:11:48 LOG6[13546:139687476688640]: SSL_shutdown successfully sent close_notify alert<BR>2012.02.29 19:11:48 LOG5[13546:139687476688640]: Error detected on SSL (read) file descriptor: Connection reset by peer (104)</DIV>
<DIV>-----------------------------------------</DIV>
<DIV>Stunnel settings:</DIV>
<DIV>-----------------------------------------</DIV>
<DIV>#Certificate/key is needed in server mode and optional in client mode<BR>cert = /usr/local/etc/stunnel/stunnel.pem<BR>key = /usr/local/etc/stunnel/stunnel.pem<BR>#<BR>#Authentication stuff<BR>;CApath = /etc/stunnel/Trusted<BR>;CRLpath = /etc/stunnel/Revoked<BR>CAfile = /usr/local/etc/stunnel/Trusted/Trusted.pem<BR>verify = 0<BR>#<BR>#Log<BR>#output = /var/log/stunnel.log<BR>debug = 7<BR>foreground = yes<BR>#<BR>#Protocol version (all, SSLv2, SSLv3, TLSv1)<BR>#sslVersion = SSLv3<BR>options = NO_SSLv2<BR>#<BR>#Disable FIPS mode to allow non-approved protocols and algorithms<BR>fips = no<BR>#<BR>#Some performance tunings<BR>socket = l:TCP_NODELAY=1<BR>socket = r:TCP_NODELAY=1<BR>options = DONT_INSERT_EMPTY_FRAGMENTS<BR>compression = zlib<BR>#<BR>#These options provide additional security at some performance degradation<BR>options = SINGLE_ECDH_USE<BR>options = SINGLE_DH_USE<BR>#<BR># Connections<BR>[3proxy]<BR>accept = 30001<BR>connect = 127.0.0.1:30010<BR>client = no<BR>TIMEOUTidle = 1800<BR>----------------------------------------</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>I have also try with different certificates, does not work either. I downloaded the cert and key from the server and start a server on my client computer, everything runs fine.</DIV>
<DIV> </DIV>
<DIV>Thank you for replying and helping.</DIV>
<DIV> </DIV>
<DIV>At 2012-03-01 10:25:52,"Jake Skinner" <Jake.Skinner@ontariosystems.com> wrote:<BR></DIV>
<BLOCKQUOTE style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" id="isReplyContent">
<P><FONT color="navy" size="2" face="Arial">Have you tried disabling FIPS to see if your connection works without? <BR><BR>Jake Skinner <BR>Telephony Technology Specialist <BR>Ontario Systems, LLC <BR>Office +1.765.751.7000 <BR><BR><BR>Thumbed posthaste from my mobile device; please forgive any typing or grammatical errors. <BR></FONT></P>
<P></P>
<HR tabIndex="-1" align="center" SIZE="2" width="100%">
<FONT size="2" face="Tahoma"><B>From</B>: <A href="mailto:stunnel-users-bounces@stunnel.org">stunnel-users-bounces@stunnel.org</A> <STUNNEL-USERS-BOUNCES><BR><B>To</B>: <A href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</A> <STUNNEL-USERS><BR><B>Sent</B>: Wed Feb 29 19:41:02 2012<BR><B>Subject</B>: [stunnel-users] FIPS_mode_set:fingerprint does not match <BR></STUNNEL-USERS></STUNNEL-USERS-BOUNCES></FONT>
<DIV style="LINE-HEIGHT: 1.7; FONT-FAMILY: arial; COLOR: #000000; FONT-SIZE: 14px">
<P>I have the following problem running stunnel on Centos 6.x 64bit with the following error:</P>
<P>I have been search with google to see if there was a solution but nothing was found</P>
<P>Thank you for your reply and your help, hopefully I can get this solved.</P>
<P>********************************************************************************</P>
<P>Clients allowed=500<BR>stunnel 4.52 on x86_64-unknown-linux-gnu platform<BR>Compiled/running with OpenSSL 1.0.0-fips 29 Mar 2010<BR>Threading:PTHREAD SSL:ENGINE,FIPS Auth:none Sockets:POLL,IPv6<BR>Reading configuration from file /usr/local/etc/stunnel/stunnel.conf<BR>FIPS_mode_set: 2D06C06E: error:2D06C06E:FIPS routines:FIPS_mode_set:fingerprint does not match</P>
<P>*******************************************************************************</P></DIV><BR><BR><SPAN title="neteasefooter"><SPAN id="netease_mail_footer"></SPAN></SPAN><BR><BR>
<P><I><FONT size="1" face="Verdana"><B>Attention:</B> This message and all attachments are private and may contain information that is confidential and privileged. If you receive this message in error, please notify the sender by reply email and delete the message immediately.</FONT></I></P> </BLOCKQUOTE></div><br><br><span title="neteasefooter"><span id="netease_mail_footer"></span></span>