<html><br><font face="arial" size="2"><font face="arial" size="2">Ouch #2 missing...<br><br></font></font><font face="arial" size="2"><font face="arial" size="2">Hi Adrian, looks good to me so far - mostly. Try to replace the client=yes with a client=no on the server<br><br>You are connection to :9999 with curl(?)<br>Try verify it via "openssl s_client -connect yourserverip:1988" command<br><br>Best Regards<br>Michael<br><br></font></font><font face="arial" size="2"><font face="arial" size="2"></font><blockquote style="border-left: 2px solid rgb(0, 0, 0); padding-right: 0px; padding-left: 5px; margin-left: 5px; margin-right: 0px;" dir="ltr">--- Ursprüngliche Nachricht ---<br><b>Von:</b> "test rig" <testrig@z1p.biz><br><b>Datum:</b> 09.10.2015 09:48:02<br><b>An:</b> "stunnel-users@stunnel.org." <stunnel-users@stunnel.org><br><b>Betreff:</b> Re: [stunnel-users] (no subject)<br><br><font
face="arial" size="2">Hi Adrian, looks good to me so far - mostly. Try to replace the client=yes with a client=no on the server<br><blockquote style="border-left: 2px solid rgb(0, 0, 0); padding-right: 0px; padding-left: 5px; margin-left: 5px; margin-right: 0px;" dir="ltr">--- Ursprüngliche Nachricht ---<br><b>Von:</b> Adrián Mihálko <adriankoooo@gmail.com><br><b>Datum:</b> 09.10.2015 08:15:19<br><b>An:</b> stunnel-users@stunnel.org<br><b>Betreff:</b> [stunnel-users] (no subject)<br><br><div dir="ltr"><div>Dear stunnel users,</div><div><br></div><div>I have a little service which listen only on <a href="https://localhost:4952/" target="_blank" rel="noreferrer">https://localhost:4952</a> and checks source hostname. I want to connect on "listen:1988" and redirect requests with stunnel to "localhost:4952"<br><br><a href="https://192.168.1.10:1988/" target="_blank" rel="noreferrer">https://192.168.1.10:1988</a>
-> redirect <a href="https://localhost:4952/" target="_blank" rel="noreferrer">https://localhost:4952</a><br><br><br> I am trying to configure stunnel like this<br><br> [myservice]<br> cert = stunnel.pem<br> client = yes<br> accept = <a href="http://0.0.0.0:1988/" target="_blank" rel="noreferrer">0.0.0.0:1988</a><br> connect = localhost:4952<br><br> remote machine$ curl <a href="https://192.168.1.25:9999/DYMO/DLS/Printing/Check" target="_blank" rel="noreferrer">https://192.168.1.25:9999/DYMO/DLS/Printing/Check</a> -v<br> * Trying 192.168.1.25...<br> * Connected to 192.168.1.25 (192.168.1.25) port 9999 (#0)<br> * WARNING: using IP address, SNI is being disabled by the OS.<br> * Unknown SSL protocol error in connection to 192.168.1.25:-9847<br> * Closing connection 0<br> curl: (35) Unknown SSL protocol error in connection to 192.168.1.25:-9847<br><br> stunnel.log:<br> 2015.10.09
09:05:42 LOG5[38]: Service [myservice] accepted connection from <a href="http://192.168.1.24:60748/" target="_blank" rel="noreferrer">192.168.1.24:60748</a><br> 2015.10.09 09:05:42 LOG6[38]: failover: round-robin, starting at entry #1<br> 2015.10.09 09:05:42 LOG6[38]: s_connect: connecting <a href="http://127.0.0.1:41952/" target="_blank" rel="noreferrer">127.0.0.1:41952</a><br> 2015.10.09 09:05:42 LOG5[38]: s_connect: connected <a href="http://127.0.0.1:41952/" target="_blank" rel="noreferrer">127.0.0.1:41952</a><br> 2015.10.09 09:05:42 LOG5[38]: Service [myservice] connected remote server from <a href="http://127.0.0.1:50503/" target="_blank" rel="noreferrer">127.0.0.1:50503</a><br> 2015.10.09 09:05:42 LOG6[38]: SNI: sending servername: localhost<br> 2015.10.09 09:05:42 LOG6[38]: Certificate verification disabled<br> 2015.10.09 09:05:42 LOG6[38]: Certificate verification disabled<br> 2015.10.09
09:05:42 LOG6[38]: SSL connected: new session negotiated<br> 2015.10.09 09:05:42 LOG6[38]: Negotiated TLSv1 ciphersuite AES128-SHA (128-bit encryption)<br> 2015.10.09 09:05:42 LOG6[38]: SSL socket closed (SSL_read)<br> 2015.10.09 09:05:42 LOG5[38]: Connection closed: 230 byte(s) sent to SSL, 505 byte(s) sent to socket<br><br> I am tried verify = 1 to 4, either works. :(<br><br> Best Regards,<br> Adrian </div></div>
</adriankoooo@gmail.com></blockquote></font>
<br><br>
______________________________________________________<br>
powered by Perfect-Privacy.com / Secure-Mail.biz - anonymous and secure internet.</blockquote></font>
<br /><br />
______________________________________________________<br />
powered by Perfect-Privacy.com / Secure-Mail.biz - anonymous and secure internet.</html>