<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 9.00.8112.16514">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2 face=Arial>Hi,</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Much appreciation to Stunnel and OpenSSL
for a long, successful provision.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I can't be sure yet if the concern below is Stunnel
or OpenSSL related.</FONT></DIV>
<DIV><FONT size=2 face=Arial>I've surfed Google and found nothing
similar.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Stunnel package with integral OpenSSL is current
release.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I recently had to secure and connect two public
facing client machines on the same Citrix Xen 6.2 release, running Server
2003 x 64 bit.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I typically use Stunnel with self generated Pem,
for securing short term TightVNC sessions.</FONT></DIV>
<DIV><FONT size=2 face=Arial>The config is always fairly generic, loopback
allowed, securing across 127.0.0.1</FONT></DIV>
<DIV><FONT size=2 face=Arial>Typically I don't make name references in the
.conf profile, just accept / connect on related ports.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>This is the first time I recall ever pointing two
VM's at each other.</FONT></DIV>
<DIV><FONT size=2 face=Arial>I have tried both service and gui on both Stunnel
and VNC.</FONT></DIV>
<DIV><FONT size=2 face=Arial>Tried both application listing and discrete port
listing in the server's windows firewall.</FONT></DIV>
<DIV><FONT size=2 face=Arial>I have tried updating security to the Admin account
as owner or Administrators, in general.</FONT></DIV>
<DIV><FONT size=2 face=Arial>I have tried launching either or both as
Administrator.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>When VNC client viewer calls to Server, Stunnel
sees the connect, succeeds the Pem and stops.</FONT></DIV>
<DIV><FONT size=2 face=Arial>If I restart the stunnel service at the server, the
viewer auth dialog suddenly succeeds.</FONT></DIV>
<DIV><FONT size=2 face=Arial>I question if this remains secured but clearly
isn't practical for application.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Both VM's are connected to me via RDP at the time,
if this might relate to an Auth violation.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>I tried multiple VMs to eliminate anything related
to a bungled VM config.</FONT></DIV>
<DIV><FONT size=2 face=Arial>I'm guessing there is some kind of circular routing
restriction possibly.</FONT></DIV>
<DIV><FONT size=2 face=Arial>Citrix does use an X-window console to each VM on
the control path, but in other instances there's never been any
conflict.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Not sure how to determine if the issue is config,
Stunnel or OpenSSL or how to resolve it.</FONT></DIV>
<DIV><FONT size=2 face=Arial>Any suggestions would be appreciated.</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Regards and thank you again,</FONT></DIV>
<DIV><FONT size=2 face=Arial></FONT> </DIV>
<DIV><FONT size=2 face=Arial>Mike</FONT></DIV></BODY></HTML>