<div dir="ltr">Thanks for the tip Michal.<div><br></div><div>I figured out the problem. There was an undocumented change in the format of the env var SSL_CLIENT_DN.</div><div><br></div><div>I was using this code to extract the CN:</div><div><br></div><div><div>    char *cn = strstr(env, "/CN=");</div></div><div><br></div><div>Now I need to use this:</div><div><br></div><div><div>    char *cn = strstr(env, " CN=");</div></div><div><br></div><div>Seems like a pointless change. But a change that should have been documented.</div><div><br></div><div>Scott</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, May 3, 2015 at 10:59 PM, Michal Trojnara <span dir="ltr"><<a href="mailto:Michal.Trojnara@mirt.net" target="_blank">Michal.Trojnara@mirt.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<span class=""><br>
Scott Weisman wrote:<br>
<br>
> exec = /opt/cmf/bin/cf-server execargs = /opt/cmf/bin/cf-server -p<br>
> /opt/jail/stunnel/pipes/<br>
</span>[cut]<br>
<span class="">> <a href="tel:2015.05.01%2015" value="+12015050115">2015.05.01 15</a>:37:33 LOG6[main]: Child process 2899 terminated on<br>
> signal 11<br>
<br>
</span>Your /opt/cmf/bin/cf-server died with signal 11, i.e., SIGSEGV.<br>
The proper course of action is to enable creating core files with<br>
"ulimit -c unlimited", create the core file, and inspect it with gdb.<br>
<br>
Mike<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1<br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iQIcBAEBAgAGBQJVRn4HAAoJEC78f/DUFuAUw8cQALcaTNk+xERG3eEfacv+Sg5s<br>
nJGr/Nlgk5NozFlBY0LiE1Sv8n28ExNMegVrwqkio/1xS8sGT3UEQWbNGRsL9KPD<br>
9OHx1jY4xkmcY8t9hIRghMl6UPzFAr7yeJfbcsQbF5p+Zxp1szwCWDhXunhRShWR<br>
hKEdJ1qNOehBfAOM1j65cpPZGhLb8CdvI5wioM9qms62+jPH0p7OR0Pcxj/AUfYY<br>
98P6VZBf3R27Nwxa1suI9l2UFhrO5SWcGwB2mhqQyID4U6iSelnjZkly91gJ8fv+<br>
7VKzF1Xnp+5hL9tY0Yb1pjRMDmk6R6UuQbXWKLkoTbGKTl0Mr5r+rifLd/vh+F8z<br>
VbRa9Gd0aaOpdnYs+KaeOV6iou0scjhpxM78SFo0HMBIs18+baXfGZNbRjnvD3Gw<br>
aaBgnOQuPuXUGPfwIfTnP0HUo3P7+ZRng7620EDUTskIrO0WIinzWHkMhwfpqpgq<br>
/PFp+7YTrxnfMCBU6UAoONk/Tr0jrTv9eVBkvykk2Qfhm6fEem2jrqWzOuiS5jkg<br>
z3epcuPdXTkamI0gAQ3dJo3TmFw8Ai6Q46/7CJVTxYGzwgIXf3yNNGpUEWNrC9R6<br>
KpfPfB2A4sT3J3oHdXh7I/q0BcBgpAF/CvooRdCA+Ib8tzOzWeM9kzprzxowhtDt<br>
tSko3NkMnv0ihEi5S8fu<br>
=fjzb<br>
-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<a href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><br>
</blockquote></div><br></div>