<font size=3>Hi everyone, <br>
<br>
I need to connect to proxy socks V5 in order to send file in my server.
<br>
<br>
I configure my stunnel like this :<br>
</font>
<table border width=100%>
<tr valign=top>
<td width=100%><font size=3>sslVersion = SSLv3</font>
<br><font size=3>client=yes</font>
<br><font size=3>cert = /opt/freeware/etc/stunnel/ca_nopass.pem</font>
<br><font size=3>pid = /var/adm/stunnel_test.pid</font>
<br><font size=3>socket = l:TCP_NODELAY=1</font>
<br><font size=3>socket = r:TCP_NODELAY=1</font>
<br><font size=3>debug = 7</font>
<br><font size=3>output = /logs/stunnel/stunnel.log</font>
<br><font size=3>; Don't forget to c_rehash CApath</font>
<br><font size=3>; CApath is located inside chroot jail</font>
<br><font size=3>CApath = /opt/freeware/etc/stunnel/CA_files/</font>
<br><font size=3>protocol = connect</font>
<br><font size=3>protocolAuthentication = basic</font>
<br><font size=3>protocolHost = ***:8080</font>
<br><font size=3>[pesit]</font>
<br><font size=3>accept = 12099</font>
<br><font size=3>connect = ***:433</font></table>
<br><font size=3><br>
But it doesn't works!</font>
<br><font size=3><br>
The log from my stunnel client :</font>
<table border width=100%>
<tr valign=top>
<td width=100%><font size=3>2013.03.11 18:57:30 LOG5[26673178:260]: Service
pesit accepted connection from ***:48549</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[26673178:260]: remote socket:
FD=1 allocated (non-blocking mode)</font>
<br><font size=3>2013.03.11 18:57:30 LOG6[26673178:260]: connect_blocking:
connecting ::1:10443</font>
<br><font size=3>2013.03.11 18:57:30 LOG3[26673178:260]: connect_blocking:
connect ::1:10443: Connection refused (79)</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[26673178:260]: remote socket:
FD=1 allocated (non-blocking mode)</font>
<br><font size=3>2013.03.11 18:57:30 LOG6[26673178:260]: connect_blocking:
connecting ****:10443</font>
<br><font size=3>2013.03.11 18:57:30 LOG5[26673178:260]: connect_blocking:
connected ****:10443</font>
<br><font size=3>2013.03.11 18:57:30 LOG5[26673178:260]: Service pesit
connected remote server from ****:48551</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[26673178:260]: Remote FD=1 initialized</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[26673178:260]: Option TCP_NODELAY
set on remote socket</font>
<br><font size=3>2013.03.11 18:57:30 LOG6[26673178:260]: Client-mode connect
protocol negotiations started</font>
<br><font size=3><b>2013.03.11 18:57:30 LOG7[26673178:260]: ->
CONNECT ****:1080 HTTP/1.1</b></font>
<br><font size=3><b>2013.03.11 18:57:30 LOG7[26673178:260]: ->
Host: ****:1080</b></font>
<br><font size=3>2013.03.11 18:57:30 LOG7[26673178:260]: -></font>
<br><font size=3>2013.03.11 18:57:30 LOG3[26673178:260]: fdgetline: readsocket:
Connection reset by peer (73)</font>
<br><font size=3>2013.03.11 18:57:30 LOG5[26673178:260]: Connection reset:
0 bytes sent to SSL, 0 bytes sent to socket</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[26673178:260]: Service pesit
finished (0 left)</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[26673178:260]: str_stats: 0 block(s),
0 data byte(s), 0 control byte(s)</font>
<br><font size=3>2013.03.11 18:57:32 LOG7[26673178:1]: local socket: FD=0
allocated (non-blocking mode)</font></table>
<br><font size=3><br>
In my stunnel server, i have the following message :<br>
"<b>SSL_accept: 1407609B: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https
proxy request</b>"</font>
<table border width=100%>
<tr valign=top>
<td width=100%><font size=3>2013.03.11 18:57:30 LOG7[27525210:1]: Service
pesitip accepted FD=0 from ****:48551</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[27525210:265]: Service pesitip
started</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[27525210:265]: Option TCP_NODELAY
set on local socket</font>
<br><font size=3>2013.03.11 18:57:30 LOG5[27525210:265]: Service pesitip
accepted connection from 159.50.49.69:48551</font>
<br><font size=3><b>2013.03.11 18:57:30 LOG3[27525210:265]: SSL_accept:
1407609B: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO:https proxy
request</b></font>
<br><font size=3>2013.03.11 18:57:30 LOG5[27525210:265]: Connection reset:
0 bytes sent to SSL, 0 bytes sent to socket</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[27525210:265]: Service pesitip
finished (0 left)</font>
<br><font size=3>2013.03.11 18:57:30 LOG7[27525210:265]: str_stats: 0 block(s),
0 data byte(s), 0 control byte(s)</font>
<br><font size=3>2013.03.11 18:57:32 LOG7[27525210:1]: local socket: FD=0
allocated (non-blocking mode)</font></table>
<br><font size=3><br>
Can you help me to configure my stunnel please?<br>
<br>
Thanks.</font>
<br>
<br><font size=2 face="sans-serif">Regards,<br>
<br>
Laurent UK<br>
<br>
</font><p></p>
<p>This message and any attachments (the "message") is<br>
intended solely for the intended addressees and is confidential. <br>
If you receive this message in error,or are not the intended recipient(s), <br>
please delete it and any copies from your systems and immediately notify<br>
the sender. Any unauthorized view, use that does not comply with its purpose, <br>
dissemination or disclosure, either whole or partial, is prohibited. Since the internet <br>
cannot guarantee the integrity of this message which may not be reliable, BNP PARIBAS <br>
(and its subsidiaries) shall not be liable for the message if modified, changed or falsified. <br>
Do not print this message unless it is necessary,consider the environment.</p>
<p>----------------------------------------------------------------------------------------------------------------------------------</p>
<p>Ce message et toutes les pieces jointes (ci-apres le "message") <br>
sont etablis a l'intention exclusive de ses destinataires et sont confidentiels.<br>
Si vous recevez ce message par erreur ou s'il ne vous est pas destine,<br>
merci de le detruire ainsi que toute copie de votre systeme et d'en avertir<br>
immediatement l'expediteur. Toute lecture non autorisee, toute utilisation de <br>
ce message qui n'est pas conforme a sa destination, toute diffusion ou toute <br>
publication, totale ou partielle, est interdite. L'Internet ne permettant pas d'assurer<br>
l'integrite de ce message electronique susceptible d'alteration, BNP Paribas <br>
(et ses filiales) decline(nt) toute responsabilite au titre de ce message dans l'hypothese<br>
ou il aurait ete modifie, deforme ou falsifie. <br>
N'imprimez ce message que si necessaire, pensez a l'environnement.</p>