<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
p.yiv9373448809msolistparagraph, li.yiv9373448809msolistparagraph, div.yiv9373448809msolistparagraph
{mso-style-name:yiv9373448809msolistparagraph;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.yiv9373448809msonormal, li.yiv9373448809msonormal, div.yiv9373448809msonormal
{mso-style-name:yiv9373448809msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.yiv9373448809msochpdefault, li.yiv9373448809msochpdefault, div.yiv9373448809msochpdefault
{mso-style-name:yiv9373448809msochpdefault;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.yiv9373448809msohyperlink
{mso-style-name:yiv9373448809msohyperlink;}
span.yiv9373448809msohyperlinkfollowed
{mso-style-name:yiv9373448809msohyperlinkfollowed;}
span.yiv9373448809htmlpreformattedchar
{mso-style-name:yiv9373448809htmlpreformattedchar;}
span.yiv9373448809emailstyle20
{mso-style-name:yiv9373448809emailstyle20;}
span.yiv9373448809emailstyle21
{mso-style-name:yiv9373448809emailstyle21;}
span.yiv9373448809emailstyle22
{mso-style-name:yiv9373448809emailstyle22;}
span.yiv9373448809emailstyle23
{mso-style-name:yiv9373448809emailstyle23;}
p.yiv9373448809msonormal1, li.yiv9373448809msonormal1, div.yiv9373448809msonormal1
{mso-style-name:yiv9373448809msonormal1;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.yiv9373448809msohyperlink1
{mso-style-name:yiv9373448809msohyperlink1;
color:#0563C1;
text-decoration:underline;}
span.yiv9373448809msohyperlinkfollowed1
{mso-style-name:yiv9373448809msohyperlinkfollowed1;
color:#954F72;
text-decoration:underline;}
p.yiv9373448809msolistparagraph1, li.yiv9373448809msolistparagraph1, div.yiv9373448809msolistparagraph1
{mso-style-name:yiv9373448809msolistparagraph1;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.yiv9373448809htmlpreformattedchar1
{mso-style-name:yiv9373448809htmlpreformattedchar1;
font-family:Consolas;
color:black;}
span.yiv9373448809emailstyle201
{mso-style-name:yiv9373448809emailstyle201;
color:windowtext;}
span.yiv9373448809emailstyle211
{mso-style-name:yiv9373448809emailstyle211;
color:#1F497D;}
span.yiv9373448809emailstyle221
{mso-style-name:yiv9373448809emailstyle221;
color:#1F497D;}
span.yiv9373448809emailstyle231
{mso-style-name:yiv9373448809emailstyle231;
color:#1F497D;}
p.yiv9373448809msochpdefault1, li.yiv9373448809msochpdefault1, div.yiv9373448809msochpdefault1
{mso-style-name:yiv9373448809msochpdefault1;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:10.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.EmailStyle40
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks Jose/all who ever helped in solving the issue. As in future the URL is getting framed in runtime and keep changing so we are proceeding with TIBCO upgrade
as a better option.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Thanks and Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Jothish
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">TIBCO TSD<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Ph. : +91 44 39263958<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">Mobile : +91 9884040171<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1F497D">Support : +91 9962007110</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#17365D">OC : jothish.chokkalingam</span><span style="font-size:9.0pt;font-family:"Calibri",sans-serif;color:#17365D"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#17365D">Group mail:- Telstra.psm.tsd.tibco@accenture.com<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Jose Alf. [mailto:josealf@rocketmail.com]
<br>
<b>Sent:</b> Friday, November 25, 2016 10:09 AM<br>
<b>To:</b> Chokkalingam, Jothish <jothish.chokkalingam@accenture.com><br>
<b>Cc:</b> cbrowne@cbcs-usa.com; stunnel-users@stunnel.org<br>
<b>Subject:</b> Re: [stunnel-users] Help in setting stunnel in server mode to over come TLSV2 compatibility<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div id="yui_3_16_0_1_1480044289359_14368">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Jothish,<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14369">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14371">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">1. You are using a very outdated version of OpenSSL (openssl 0.9.8 is EOL). I suggest you use a newer, supported version.<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14373">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14375">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2. On a DOS Window, try this:<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14376">
<p class="MsoNormal" style="background:white"><span style="font-family:"Courier New";color:black">openssl dhparam -rand randfile1;randfile2;randfile3 1024</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14378">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14380">
<div id="yui_3_16_0_1_1480044289359_14520">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">where randfile1,randfile2....
<i id="yui_3_16_0_1_1480044289359_14808">are existing files or directories </i>to use as entrophy sources. If you're on Linux you can use
</span><span style="font-family:"Courier New";color:black">dd if=/dev/urandom count=2 | openssl dhparam -rand - 1024</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14900">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14582">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">This will print something like this:<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Courier New";color:black">WARNING: can't open config file: c:\openssl-vc/ssl/openssl.cnf<br id="yui_3_16_0_1_1480044289359_14383">
Loading 'screen' into random state - done<br id="yui_3_16_0_1_1480044289359_14384">
0 semi-random bytes loaded<br id="yui_3_16_0_1_1480044289359_14385">
Generating DH parameters, 1024 bit long safe prime, generator 2<br id="yui_3_16_0_1_1480044289359_14386">
This is going to take a long time<br id="yui_3_16_0_1_1480044289359_14387">
..+.. bla, bla....++*<br id="yui_3_16_0_1_1480044289359_14388">
unable to write 'random state'<br id="yui_3_16_0_1_1480044289359_14389">
-----BEGIN DH PARAMETERS-----<br id="yui_3_16_0_1_1480044289359_14390">
MIGHAoGBAJJ+QAYkKQd0pG1lxZKDYVZaURkTINQho8CWCUYOMp2ZEwZeMrEv+kjd<br id="yui_3_16_0_1_1480044289359_14391">
PVb4Ilnah1TmZQOxu1v8HtSWmKpclhlTDKjmDbhznUFkQhmRGjxXDCfrhnvNI4hV<br id="yui_3_16_0_1_1480044289359_14392">
kOB/3lGcWo50ttf+ZqNaXd0lKf9YfnjkRUSUtrHiMRL9CdecxQXbAgEC<br id="yui_3_16_0_1_1480044289359_14393">
-----END DH PARAMETERS-----</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
<div id="yui_3_16_0_1_1480044289359_14395">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14397">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Now, cut from ---BEGIN... all the way to PARAMETERS--- and add it to your cert PEM file.<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14398">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14400">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">3. Try again, your check command:
</span><span style="font-family:"Helvetica",sans-serif;color:#1F497D">openssl dhparam -inform PEM -in ./training_client.pem -check -text</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14402">
<div id="yui_3_16_0_1_1480044289359_15174">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Should print something like:<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_15123">
<p class="MsoNormal" style="background:white"><span style="font-family:"Courier New";color:black"> DH Parameters: (1024 bit)<br id="yui_3_16_0_1_1480044289359_15210">
prime:<br id="yui_3_16_0_1_1480044289359_15211">
00:92:7e:40:06:24:29:07:74:a4:6d:65:c5:92:83:<br id="yui_3_16_0_1_1480044289359_15212">
...<br id="yui_3_16_0_1_1480044289359_15219">
31:12:fd:09:d7:9c:c5:05:db<br id="yui_3_16_0_1_1480044289359_15220">
generator: 2 (0x2)<br id="yui_3_16_0_1_1480044289359_15221">
DH parameters appear to be ok.<br id="yui_3_16_0_1_1480044289359_15222">
-----BEGIN DH PARAMETERS-----<br id="yui_3_16_0_1_1480044289359_15223">
MIGHAoGBAJJ+QAYkKQd0pG1lxZKDYVZaURkTINQho8CWCUYOMp2ZEwZeMrEv+kjd<br id="yui_3_16_0_1_1480044289359_15224">
....</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_15334">
<p class="MsoNormal" style="background:white"><span style="font-family:"Courier New";color:black">-----END DH PARAMETERS-----</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_15227">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
</div>
<div id="yui_3_16_0_1_1480044289359_14404">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">4. Now, try connecting from SFDC to tibco and let us know.<o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14406">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_14408">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Saludos<o:p></o:p></span></p>
</div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Jose<o:p></o:p></span></p>
<div id="yui_3_16_0_1_1480044289359_14316">
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<div>
<div>
<div id="yui_3_16_0_1_1480044289359_15267">
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">
<hr size="1" width="100%" align="center">
</span></div>
<p class="MsoNormal" style="background:white"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">From:</span></b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"> "<a href="mailto:jothish.chokkalingam@accenture.com">jothish.chokkalingam@accenture.com</a>"
<<a href="mailto:jothish.chokkalingam@accenture.com">jothish.chokkalingam@accenture.com</a>><br>
<b>To:</b> <a href="mailto:josealf@rocketmail.com">josealf@rocketmail.com</a> <br>
<b>Cc:</b> <a href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a href="mailto:stunnel-users@stunnel.org">
stunnel-users@stunnel.org</a><br>
<b>Sent:</b> Thursday, November 24, 2016 6:45 AM<br>
<b>Subject:</b> RE: [stunnel-users] Help in setting stunnel in server mode to over come TLSV2 compatibility</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
<div>
<div id="yiv9373448809AppleMailSignature">
<div id="yiv9373448809AppleMailSignature">
<div id="yui_3_16_0_1_1480044289359_15276">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">Jose,</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> </span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">For the issue as mentioned in below down mail I am following below two approaches,</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div id="yui_3_16_0_1_1480044289359_15272">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">1.</span><span style="font-size:7.0pt;font-family:"Helvetica",sans-serif;color:#1F497D">
</span><span style="font-family:"Helvetica",sans-serif;color:#1F497D">Move the TLSv1.2 enabled traffic to an intermediate port and then to target port which has TLS1 enabled, in that ssl handshake from intermediate to target port getting below error. While
triaging with openssl command, it is observed that the DH parameters are not proper. So we are trying to add the dh parameters
</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">C:\Users\robin.johnson\Documents\SSL\SSL>C:\openssl-0.9.8k_X64\bin\openssl dhparam -inform PEM -in ./training_client.pem -check -text</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">unable to load DH parameters</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">1800:error:0906D06C:PEM routines:PEM_read_bio:no start line:.\crypto\pem\pem_lib.c:650:Expecting: DH PARAMETERS
</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">stunnel.log</span><span style="font-family:Wingdings;color:#1F497D">à</span><span style="font-family:"Helvetica",sans-serif;color:#1F497D">2016.11.23
23:08:32 LOG3[131]: SSL_connect: 14082174: error:14082174:SSL routines:ssl3_check_cert_and_algorithm:dh key too small</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> 2. Using https service in stunnel traffic is received by TLS V1.1 divert to non ssl enabled port.</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">
</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Thanks and Regards,</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Jothish
</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">TIBCO TSD</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Ph. : +91 44 39263958</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Mobile : +91 9884040171</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Support : +91 9962007110</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">OC : jothish.chokkalingam</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#17365D">Group mail:-
<a href="mailto:Telstra.psm.tsd.tibco@accenture.com">Telstra.psm.tsd.tibco@accenture.com</a></span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> </span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal" style="background:white"><b><span style="font-family:"Helvetica",sans-serif">From:</span></b><span style="font-family:"Helvetica",sans-serif"> Josealf.rm [<a href="mailto:josealf@rocketmail.com">mailto:josealf@rocketmail.com</a>]
<br>
<b>Sent:</b> Thursday, November 24, 2016 4:36 PM<br>
<b>To:</b> Chokkalingam, Jothish <<a href="mailto:jothish.chokkalingam@accenture.com">jothish.chokkalingam@accenture.com</a>><br>
<b>Cc:</b> <a href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a href="mailto:stunnel-users@stunnel.org">
stunnel-users@stunnel.org</a><br>
<b>Subject:</b> Re: [stunnel-users] Help in setting stunnel in server mode to over come TLSV2 compatibility<span style="color:black"><o:p></o:p></span></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<div style="margin-bottom:12.0pt">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><br>
Can you please elaborate? If you want us to help, you need to provide enough information. <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Regards<o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Jose<o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div style="margin-bottom:12.0pt">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><br>
El 24/11/2016, a las 5:03 a.m., <<a href="mailto:jothish.chokkalingam@accenture.com" target="_blank">jothish.chokkalingam@accenture.com</a>> <<a href="mailto:jothish.chokkalingam@accenture.com" target="_blank">jothish.chokkalingam@accenture.com</a>> escribió:<o:p></o:p></span></p>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">Jose,</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:Wingdings;color:#1F497D">J</span><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> you are right.i was trying but I thought it will work as a client and it worked as a workaround.
But will check for the dh key small error while forwarding the traffic with SSL from intermediate port to another port.</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> </span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Thanks and Regards,</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Jothish
</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">TIBCO TSD</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Ph. : +91 44 39263958</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Mobile : +91 9884040171</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Support : +91 9962007110</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">OC : jothish.chokkalingam</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#17365D">Group mail:-
<a href="mailto:Telstra.psm.tsd.tibco@accenture.com" target="_blank">Telstra.psm.tsd.tibco@accenture.com</a></span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> </span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal" style="background:white"><b><span style="font-family:"Helvetica",sans-serif">From:</span></b><span style="font-family:"Helvetica",sans-serif"> Josealf.rm [<a href="mailto:josealf@rocketmail.com" target="_blank">mailto:josealf@rocketmail.com</a>]
<br>
<b>Sent:</b> Thursday, November 24, 2016 2:48 PM<br>
<b>To:</b> Chokkalingam, Jothish <<a href="mailto:jothish.chokkalingam@accenture.com" target="_blank">jothish.chokkalingam@accenture.com</a>><br>
<b>Cc:</b> <a href="mailto:cbrowne@cbcs-usa.com" target="_blank">cbrowne@cbcs-usa.com</a>;
<a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><br>
<b>Subject:</b> Re: [stunnel-users] Help in setting stunnel in server mode to over come TLSV2 compatibility<span style="color:black"><o:p></o:p></span></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Jothish,<br>
<br>
Stunnel in server mode is what you need, with 99.9% confidence.<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">When you write:<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">[https]<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Accept=443<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Connect=local host:80<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Client=no<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Stunnnel will expect TLS connections on port 443 and will forward then to your normal web server running on loopback port 80.<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Is that clear?<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Regards,<o:p></o:p></span></p>
</div>
</div>
<div id="yiv9373448809AppleMailSignature">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Jose<o:p></o:p></span></p>
</div>
</div>
<div>
<div style="margin-bottom:12.0pt">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><br>
El 24/11/2016, a las 2:29 a.m., <<a href="mailto:jothish.chokkalingam@accenture.com" target="_blank">jothish.chokkalingam@accenture.com</a>> <<a href="mailto:jothish.chokkalingam@accenture.com" target="_blank">jothish.chokkalingam@accenture.com</a>> escribió:<o:p></o:p></span></p>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> </span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D">Is there a way to forward a Secure connection from one port to non secure port using stunnel. I am googling but unable to find. If you have can you
let me know</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> </span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Thanks and Regards,</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Jothish
</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">TIBCO TSD</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Ph. : +91 44 39263958</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Mobile : +91 9884040171</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Support : +91 9962007110</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">OC : jothish.chokkalingam</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#17365D">Group mail:-
<a href="mailto:Telstra.psm.tsd.tibco@accenture.com" target="_blank">Telstra.psm.tsd.tibco@accenture.com</a></span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#1F497D"> </span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<div>
<p class="MsoNormal" style="background:white"><b><span style="font-family:"Helvetica",sans-serif">From:</span></b><span style="font-family:"Helvetica",sans-serif"> stunnel-users [<a href="mailto:stunnel-users-bounces@stunnel.org" target="_blank">mailto:stunnel-users-bounces@stunnel.org</a>]
<b>On Behalf Of </b>Carter Browne<br>
<b>Sent:</b> Wednesday, November 23, 2016 9:30 PM<br>
<b>To:</b> <a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><br>
<b>Subject:</b> Re: [stunnel-users] Help in setting stunnel in server mode to over come TLSV2 compatibility<span style="color:black"><o:p></o:p></span></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">There are other tools for performing port forwarding with less overhead (I believe tappipe is one), although I make use stunnel to do this extensively.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">In order forward a secure connection from one port to another is a two step process with stunnel:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">A sample configuration segment would be:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">[SFDC reverse in]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">client = no<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">accept = 8008<o:p></o:p></span></p>
</div>
<div style="margin-bottom:12.0pt">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">connect = localhost:48008<br>
<br>
<br>
[SFDC reverse out]<br>
client = yes<br>
accept = localhost:48008<br>
connect = localhost:8009<o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">On 11/23/2016 10:18 AM, Rodney Lott wrote:<o:p></o:p></span></p>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div style="margin-bottom:12.0pt">
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">Hi, there.<br>
<br>
I'm no stunnel expert, but here's my $0.05 (we have no pennies in Canada anymore ;-) ):<br>
- I would try including the key as well as the cert in your stunnel config<br>
- I would enable debug on the openssl s_client call to see if it will indicate why it is reseting. Same with your SFDC client to get more info.<br>
- Question: is the "WARNING: can't open config file" message below indicative of a permissions or path problem?
<br>
- Question: Is the stunnel cert and key compatible with the TIBCO server's certificate? They need to be using certs generated from the same key source, don't they?
<br>
- You might want to fix the SSL version in the stunnel config file (i.e. sslVersion = TLSv1.2)<br>
<br>
Good luck with your debugging. <br>
<br>
Rodney<o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">On 2016-11-22 07:43 PM,
<a href="mailto:jothish.chokkalingam@accenture.com" target="_blank">jothish.chokkalingam@accenture.com</a> wrote:<o:p></o:p></span></p>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">HI all,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black">There is a problem we have currently connecting tibco client to SFDC sever via TLS v1.2 and that’s solved by using stunnel in client
mode. And the communication from SFDC client to tibco server applications w.r.t TLS V1.2 I am unable to solve using stunnel. Below is the configuration in stunnel in server end to divert the traffic from 8008 to 8009, can you help here with the logs is the
stunnel configuration is correct or there any missed/need to alter.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black">[SFDC reverse proxy test]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black">debug=7<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black">;client = yes<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black">accept = 8008</span><span style="font-family:Wingdings;color:black">à</span><span style="font-family:"Helvetica",sans-serif;color:black">port
used by sfdc client to connect to TIBCO server<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black">connect = localhost:8009
</span><span style="font-family:Wingdings;color:black">à</span><span style="font-family:"Helvetica",sans-serif;color:black">Tibco server that’s running<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="text-indent:.5in;background:white"><span style="font-family:"Helvetica",sans-serif;color:black">cert = stunnel.pem<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG7[118]: Service [SFDC reverse proxy test] started<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG7[118]: Option TCP_NODELAY set on local socket<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG5[118]: Service [SFDC reverse proxy test] accepted connection from 101.167.198.14:54477<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG6[118]: Peer certificate not required<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG7[118]: SSL state (accept): before/accept initialization<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG3[118]: SSL_accept: Peer suddenly disconnected<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG5[118]: Connection reset: 0 byte(s) sent to SSL, 0 byte(s) sent to socket<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG7[118]: Local descriptor (FD=696) closed<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">2016.11.23 08:31:56 LOG7[118]: Service [SFDC reverse proxy test] finished (0 left)<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">PFB the openssl snap shot looks odd
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">C:\Program Files (x86)\stunnel\bin>openssl s_client -connect localhost:8008 -prexit -showcerts<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><b><span style="font-family:"Helvetica",sans-serif;color:black;background:yellow">WARNING: can't open config file: /devel/win32/openssl/openssl.cnf</span></b><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">CONNECTED(0000016C)<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Thanks and Regards,</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Jothish
</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">TIBCO TSD</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Ph. : +91 44 39263958</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Mobile : +91 9884040171</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">Support : +91 9962007110</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black">OC : jothish.chokkalingam</span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:#17365D">Group mail:-
<a href="mailto:Telstra.psm.tsd.tibco@accenture.com" target="_blank">Telstra.psm.tsd.tibco@accenture.com</a></span><span style="font-family:"Helvetica",sans-serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
<div class="MsoNormal" align="center" style="text-align:center;background:white">
<span style="font-family:"Helvetica",sans-serif;color:black">
<hr size="2" width="100%" align="center">
</span></div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-size:7.5pt;font-family:"Helvetica",sans-serif;color:black"><br>
This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by
you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of
internal compliance with Accenture policy. <br>
______________________________________________________________________________________<br>
<br>
<a href="http://www.accenture.com/" target="_blank">www.accenture.com</a><br>
</span><span style="font-family:"Helvetica",sans-serif;color:black"><br>
<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<pre style="background:white"><span style="color:black">_______________________________________________<o:p></o:p></span></pre>
<pre style="background:white"><span style="color:black">stunnel-users mailing list<o:p></o:p></span></pre>
<pre style="background:white"><span style="color:black"><a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><o:p></o:p></span></pre>
<pre style="background:white"><span style="color:black"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.stunnel.org_cgi-2Dbin_mailman_listinfo_stunnel-2Dusers&d=DgMDaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=MqNUOU_xr_CQWlW-GqRdBeY3oxru560GTYsOPa0RQctKABtP4l_SCfWLL8Ex9w7w&m=4huWq-QNmeb8U731CD550mFem3fJi1V_h32_3NnDWgc&s=VpkrTsuWKtX284qEcR4zgE-0ZQcbC5mQrBA5w0wCSME&e=" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><o:p></o:p></span></pre>
</blockquote>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><br>
<br>
<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<pre style="background:white"><span style="color:black">_______________________________________________<o:p></o:p></span></pre>
<pre style="background:white"><span style="color:black">stunnel-users mailing list<o:p></o:p></span></pre>
<pre style="background:white"><span style="color:black"><a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><o:p></o:p></span></pre>
<pre style="background:white"><span style="color:black"><a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.stunnel.org_cgi-2Dbin_mailman_listinfo_stunnel-2Dusers&d=DgMDaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=MqNUOU_xr_CQWlW-GqRdBeY3oxru560GTYsOPa0RQctKABtP4l_SCfWLL8Ex9w7w&m=4huWq-QNmeb8U731CD550mFem3fJi1V_h32_3NnDWgc&s=VpkrTsuWKtX284qEcR4zgE-0ZQcbC5mQrBA5w0wCSME&e=" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><o:p></o:p></span></pre>
</blockquote>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black"> <o:p></o:p></span></p>
</div>
</div>
</blockquote>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal" style="background:white"><span style="font-family:"Helvetica",sans-serif;color:black">_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><br>
<a href="https://urldefense.proofpoint.com/v2/url?u=https-3A__www.stunnel.org_cgi-2Dbin_mailman_listinfo_stunnel-2Dusers&d=DgMFaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=MqNUOU_xr_CQWlW-GqRdBeY3oxru560GTYsOPa0RQctKABtP4l_SCfWLL8Ex9w7w&m=KpBOyF3X4pqPRFpbMzToAN2UwmN88FLptOWAJPygwvQ&s=8kvXlMhEoeJRHu_UCqWbs7nMCzviuGbvo4jzH9pJDuc&e=" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><o:p></o:p></span></p>
</div>
</div>
</blockquote>
</div>
</blockquote>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt;background:white"><span style="font-family:"Helvetica",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>