<div dir="ltr"><div class="gmail_default" style="font-family:'comic sans ms',sans-serif;color:rgb(0,0,255)">Stunnel v5.03 is the most recent version we're using, although with earlier OpenSSL versions in place.</div><div class="gmail_default" style="font-family:'comic sans ms',sans-serif;color:rgb(0,0,255)"><br></div><div class="gmail_default" style="font-family:'comic sans ms',sans-serif;color:rgb(0,0,255)">With that in mind, I compiled stunnel v5.03 with same OpenSSL 1.0.1.513 and iFix IV71446m9a applied as with the v5.17 attempt. I'm able to create sessions with no problem. The internal error/bad magic does not occur.</div><div class="gmail_default" style="font-family:'comic sans ms',sans-serif;color:rgb(0,0,255)"><br></div><div class="gmail_default" style="font-family:'comic sans ms',sans-serif;color:rgb(0,0,255)"><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, May 7, 2015 at 2:12 AM, Michal Trojnara <span dir="ltr"><<a href="mailto:Michal.Trojnara@mirt.net" target="_blank">Michal.Trojnara@mirt.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
On 06.05.2015 18:14, Eckert, Doug wrote:<br>
> I've gotten v5.17 compiled on AIX 5.3 & 6.1 with the following<br>
><br>
> xlccmp.13.1.0 13.1.0.3 COMMITTED XL C compiler<br>
> openssl.base 1.0.1.513 COMMITTED Open Secure Socket<br>
> Layer IV71446m9a Ifix for Openssl CVE<br>
><br>
> Everything seems to have compiled fine. I packaged it up,<br>
> installed, and set up a quick config. The server side aborts on me.<br>
> Debug output follows. Need some direction on where to look next.<br>
> Thanks in advance!<br>
[cut]<br>
> 2015.05.06 12:08:03 LOG5[ui]: stunnel 5.17 on<br>
> powerpc-ibm-aix5.3.0.0 platform 2015.05.06 12:08:03 LOG5[ui]:<br>
> Compiled/running with OpenSSL 1.0.1e 11 Feb 2013<br>
[cut]<br>
> INTERNAL ERROR: Bad magic at tls.c, line 182<br>
<br>
There seems to be a bug in your OpenSSL. OPENSSL_free() function was<br>
invoked on a memory block that was *not* allocated with<br>
OPENSSL_malloc(), or it was already released (double free).<br>
<br>
You may try to compile your OpenSSL from source.<br>
<br>
Mike<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1<br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iQIcBAEBAgAGBQJVSwJYAAoJEC78f/DUFuAUUZ8P/RSlI2Gi/0jKZntJ/7HckgU7<br>
OqoqzWQcd/++zLgKsBa6ZKTRP70C5eAe0z26ecQczASQURzmTVNiqvBrjyVKmWRO<br>
VJM0KVLeI5d38bRx5qBkxR3ZLa7/H68YdbczC6YiEaYGBIUUsxV19/8QXwcZGDvO<br>
3odKzy0n21TaMvdM9ACLCZHD02Pq1dQwFwYl8POhtezKbF0Rgh2OHJgVETE6Ha39<br>
ttS+muqGpaXcNQGpJ1EYtWdsSYKbSNEOawmEil9LMWYKsekbWYYf3JbJPSkL+ILO<br>
1H8vv2v5lqoihtp96PdMgx9sLn6xxbgy89UwuxS3WOIB2+/ZT0KCx5FoDh/1KwsZ<br>
ie1C+4o62CY1a8Zf07l1Z5Cc9U81GJpDhM04rUmfTldhWZaBbQJtOwRNlh2droHe<br>
uBKd7VuFV9R62wVWKtZfB0wIWzh4QMkYh/bnw+B+n9gZBenGm/8ySa2bcp3v0aXs<br>
bRebIh42yECfVdFJVLA9L08hB07OoDxog2PljNuJDPN3RCp9Rozjb4CY0Vjl+GZ/<br>
mzbOFOsN6bxb2X1WDDH6N87XHW4dcp2xqZmKp6Mw8PhXduE2DRdK9e3zTj6Pmu+K<br>
f8yK7022MkqMoiHW26Jv6c60t6WY6GDE+Rzf+A67yQEFbYB4pg2QrKuRvoXnLXdy<br>
l1HO01v+ra2zYfQF0y/v<br>
=aSTh<br>
-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<a href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><p style="margin-bottom:12.0pt"><a name="UNIQUE_ID_SafeHtmlFilter__MailAutoSig"><b><span style="font-family:"Arial","sans-serif";color:#505050">Doug
Eckert</span></b></a><span style="font-family:"Arial","sans-serif";color:#242424"><br>
</span><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#0070c0">Technical Architect</span></b><span style="color:black"></span></p>
<p><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#58a618">Global Business Technology</span></b><b><span style="font-size:8.0pt;color:#595959"><br>
</span></b><b><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#595959">Dow Jones</span></b><span style="font-family:"Arial","sans-serif";color:#242424"> </span><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#595959">| <i>A News Corporation Company</i><br>
P.O. Box 300 | Princeton NJ 08543-0300</span><span style="font-family:"Arial","sans-serif";color:#242424"><br>
</span><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#595959">(W)
609.520.4993 (C) 732.666.3681</span><span style="font-family:"Arial","sans-serif";color:#242424"><br>
</span><b><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:#595959">Email: </span></b><a href="mailto:alias@dowjones.com" target="_blank"><b><span style="font-size:8.0pt;font-family:"Arial","sans-serif";color:blue">doug.eckert@dowjones.com</span></b></a><b><span style="font-size:9.0pt;font-family:"Arial","sans-serif";color:#58a618"></span></b></p>
<p><br></p></div>
</div>