<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> J. Michael Drew [mailto:jmichaeldrew@hotmail.com] <br><b>Sent:</b> Monday, June 20, 2016 9:54 AM<br><b>To:</b> 'Josealf.rm'<br><b>Subject:</b> RE: [stunnel-users] Stunnel with IIS8 on server 2012 64 bit<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>Jose,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Once logged in to the server I can open a browser on the server and connect through <a href="https://localhost/website">https://localhost/website</a> and I can log in to the site externally as expected.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Here are the log files from IIS and stunnel where stunnel is running as a service on the Windows 2012 server:<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>When I am not logged in to the server it fails:<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal>#Software: Microsoft Internet Information Services 8.5<o:p></o:p></p><p class=MsoNormal>#Version: 1.0<o:p></o:p></p><p class=MsoNormal>#Date: 2016-06-20 00:30:21<o:p></o:p></p><p class=MsoNormal>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken<o:p></o:p></p><p class=MsoNormal>2016-06-20 00:30:21 159.xxx.xxx.xxx HEAD / - 443 - 190.xxx.xxx.xxx - - 200 0 0 1218<o:p></o:p></p><p class=MsoNormal>#Software: Microsoft Internet Information Services 8.5<o:p></o:p></p><p class=MsoNormal>#Version: 1.0<o:p></o:p></p><p class=MsoNormal>#Date: 2016-06-20 05:41:01<o:p></o:p></p><p class=MsoNormal>#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken<o:p></o:p></p><p class=MsoNormal>2016-06-20 05:41:01 10.xxx.xxx.xxx OPTIONS /C$/windows/system32/NTDLL.DLL - 80 - 159.xxx.xxx.xxx Microsoft-WebDAV-MiniRedir/6.1.7601 - 200 0 0 500<o:p></o:p></p><p class=MsoNormal>2016-06-20 05:41:01 10.xxx.xxx.xxx PROPFIND /C$/windows/system32/NTDLL.DLL - 80 - 159.xxx.xxx.xxx Microsoft-WebDAV-MiniRedir/6.1.7601 - 404 0 2 46<o:p></o:p></p><p class=MsoNormal>2016-06-20 05:41:01 10.xxx.xxx.xxx PROPFIND /C$/windows/system32 - 80 - 159.xxx.xxx.xxx Microsoft-WebDAV-MiniRedir/6.1.7601 - 404 0 2 218<o:p></o:p></p><p class=MsoNormal>2016-06-20 05:41:16 10.xxx.xxx.xxx PROPFIND /patch-{682810b5-36dc-4e5d-81dd-6c02cd8f445b}-patchtoolsd.exe - 80 - 159.82.156.241 Microsoft-WebDAV-MiniRedir/6.1.7601 - 404 0 64 62<o:p></o:p></p><p class=MsoNormal>2016-06-20 05:41:27 10.xxx.xxx.xxx PROPFIND /N$cl64.exe - 80 - 159.xxx.xxx.xxx 1 Microsoft-WebDAV-MiniRedir/6.1.7601 - 404 0 2 62<o:p></o:p></p><p class=MsoNormal>2016-06-20 05:41:27 10.xxx.xxx.xxx PROPFIND /C$rome.dll - 80 - 159.xxx.xxx.xxx Microsoft-WebDAV-MiniRedir/6.1.7601 - 404 0 2 296<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Stunell.conf:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>cert = extwebsvr_ver.pem<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>; Some performance tuning<o:p></o:p></p><p class=MsoNormal>socket = l:TCP_NODELAY=1<o:p></o:p></p><p class=MsoNormal>socket = r:TCP_NODELAY=1<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>; Peer Authentication<o:p></o:p></p><p class=MsoNormal>verify = 2<o:p></o:p></p><p class=MsoNormal>CAfile = extwebsvr_root.pem<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>; Debug mode - useful for troubleshooting<o:p></o:p></p><p class=MsoNormal>debug = 7<o:p></o:p></p><p class=MsoNormal>output = stunnel.log<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>; Client mode<o:p></o:p></p><p class=MsoNormal>client = yes<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>; Setup tunnels to each EMS node<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>[CLIxxxxxxxx)]<o:p></o:p></p><p class=MsoNormal>accept=127.0.0.1:9001<o:p></o:p></p><p class=MsoNormal>connect=10.xxx.xxx.xxx:9009<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Stunnel.log:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG7[main]: No limit detected for the number of clients<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG5[main]: stunnel 5.27 on x86-pc-msvc-1500 platform<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG5[main]: Compiled/running with OpenSSL 1.0.2e-fips 3 Dec 2015<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG5[main]: Threading:WIN32 Sockets:SELECT,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG7[main]: errno: (*_errno())<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG5[main]: Reading configuration from file stunnel.conf<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG7[ui]: GUI message loop initialized<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG7[cron]: Cron thread initialized<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG5[main]: UTF-8 byte order mark detected<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG6[main]: Initializing service [CLI9F529A0A]<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG6[main]: Loading certificate from file: extwebsvr_ver.pem<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG6[main]: Certificate loaded from file: extwebsvr_ver.pem<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG6[main]: Loading private key from file: extwebsvr_ver.pem<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG6[main]: Private key loaded from file: extwebsvr_ver.pem<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG7[main]: Private key check succeeded<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG4[main]: Service [CLIxxxxxxxx] uses "verify = 2" without subject checks<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG4[main]: Use "checkHost" or "checkIP" to restrict trusted certificates<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG7[main]: SSL options: 0x03000004 (+0x03000000, -0x00000000)<o:p></o:p></p><p class=MsoNormal>2016.06.20 09:17:39 LOG5[main]: Configuration successful<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='color:#1F497D'>Thanks for your help,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Michael<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Josealf.rm [<a href="mailto:josealf@rocketmail.com">mailto:josealf@rocketmail.com</a>] <br><b>Sent:</b> Monday, June 20, 2016 8:01 AM<br><b>To:</b> J. Michael Drew<br><b>Cc:</b> <a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Subject:</b> Re: [stunnel-users] Stunnel with IIS8 on server 2012 64 bit<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Michael,<o:p></o:p></p></div><div id=AppleMailSignature><p class=MsoNormal><o:p> </o:p></p></div><div id=AppleMailSignature><p class=MsoNormal>Is your stunnel running as a service?<o:p></o:p></p></div><div id=AppleMailSignature><p class=MsoNormal>Please post sanitized logs and configuration for a better diagnostic ...<br><br>Regards <o:p></o:p></p></div><div id=AppleMailSignature><p class=MsoNormal>Jose<o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><br>El 20 jun 2016, a las 6:39, J. Michael Drew <<a href="mailto:jmichaeldrew@hotmail.com">jmichaeldrew@hotmail.com</a>> escribió:<o:p></o:p></p></div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>Hi,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>I have a website on IIS8 and am using stunnel to forward requests over 9009 inside to my application server. When I log in to the IIS server and stay logged in everything works as expected. When I log off the IIS 8 web server my site is unreachable with a “service is unavailable”.<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Can someone help me?<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Sincere thanks,<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal>Michael<o:p></o:p></p></div></blockquote><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'>_______________________________________________<br>stunnel-users mailing list<br><a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><a href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><o:p></o:p></span></p></div></blockquote></div></body></html>