<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Arial; font-size: 12pt; color: #000000'><br>----- Forwarded Message -----<br>From: "Krinali Shah - PES" <krinali.shah@einfochips.com><br>To: stunnel-users@stunnel.org<br>Sent: Monday, February 3, 2014 3:04:44 PM<br>Subject: cross compiling stunnel-4.21 for ARM<br><br><style>p { margin: 0; }</style><div style="font-family: Arial; font-size: 12pt; color: #000000"><style>p { margin: 0; }</style><div style="font-family: Arial; font-size: 12pt; color: #000000">Hi All,<br><br> I have thttpd server cross-compiled for my ARM based embedded board.<br> Now I want to add the support for https services on my board, so I think of using stunnel with openssl.<br> I have already download source code of openssl and cross compiled it, for linux-arm.<br> I have downloaded stunnel-4.21 and followed the steps as mentioned below.<br><br> 1. create stunnel.pem file inside /etc/ssl/certs/stunnel.pem<br> 2. create stunnel.conf file inside /etc/stunnel/stunnel.conf with following parameters.<br><br> cert = /etc/ssl/certs/stunnel.pem<br> key = /etc/ssl/certs/stunnel.pem<br> chroot = /var/run/stunnel<br> setuid = stunnel4<br> setgid = stunnel4<br> debug = 7<br> pid = /stunnel.pid<br> setuid = stunnel<br> setgid = stunnel<br> socket = l:TCP_NODELAY=1<br> socket = r:TCP_NODELAY=1<br> compression = rle<br> output = /var/log/stunnel4/stunnel.log<br> client = no<br> [https]<br> accept = 10.103.2.104:443<br> connect = 127.0.0.1:8080<br> TIMEOUTclose = 0<br><br> 2. ./configure --prefix=/home/stunnel --host=arm-linux --enable-shared --with-ssl=/home <br> 3. changed CC, RANLIB and STRIP environment variables for cross compilation in Makefile.<br> 4. make<br> 5. sudo make install<br> <br> The cross-compiled binary stunnel is installed.<br> When I run the binary on board, it does not show any error. Following debug messages are seen on screen.<br> <br> 1969.12.31 21:19:54 LOG6[1154:1073842296]: Compression enabled using rle method<br> 1969.12.31 21:19:54 LOG7[1154:1073842296]: RAND_status claims sufficient entropG<br> 1969.12.31 21:19:54 LOG7[1154:1073842296]: PRNG seeded successfully<br> 1969.12.31 21:19:54 LOG7[1154:1073842296]: Certificate: /etc/ssl/certs/stunnel.m<br> 1969.12.31 21:19:54 LOG7[1154:1073842296]: Certificate loaded<br> 1969.12.31 21:19:54 LOG7[1154:1073842296]: Key file: /etc/ssl/certs/stunnel.pem<br> 1969.12.31 21:19:54 LOG7[1154:1073842296]: Private key loaded<br> 1969.12.31 21:19:54 LOG7[1154:1073842296]: SSL context initialized for service s<br><br> But, If I try to request https service from web browser (Firefox) ie, <b>https://server_ip </b>it gives me error. Meaning https server is not started correctly, still something is missing.<br><br> Please guide me if you have any clues.<br> Any help would be highly appreciated.<br><br><br><br><br><br><br><br><br>Thanks,<br>Krinali Shah<br></div></div></div></body>
<br>*************************************************************************************************************************************************************
<p align="justify"><b>eInfochips Business Disclaimer</b>: This e-mail message and all attachments transmitted with it are intended solely for the use of the addressee and may contain legally privileged and confidential information. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, copying, or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately by replying to this message and please delete it from your computer. Any views expressed in this message are those of the individual sender unless otherwise stated. Company has taken enough precautions to prevent the spr
ead of viruses. However the company accepts no liability for any damage caused by any virus transmitted by this email.</p>
*************************************************************************************************************************************************************
<br></html>
<table><tr><td bgcolor=#ffffff><font color=#000000><pre>---------------------------------------------------------------------------------------------
Notice:
This message has been scanned by Trend Micro Mail Security scanner and is believed to be clean
---------------------------------------------------------------------------------------------</pre></font></td></tr></table>