<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div dir="ltr" id="yui_3_16_0_ym19_1_1501774092082_13024"><span id="yui_3_16_0_ym19_1_1501774092082_13149" style="font-size:11.0pt;color:windowtext;">Dheeraj,</span></div><div id="yui_3_16_0_ym19_1_1501774092082_13023" class="qtdSeparateBR"><div id="yui_3_16_0_ym19_1_1501774092082_13582"><br></div><div id="yui_3_16_0_ym19_1_1501774092082_13584">Are you sure your client application is connecting to 127.0.0.1 port 9260?... <br></div><div id="yui_3_16_0_ym19_1_1501774092082_17256">The fact that no events are logged when you run your application makes me thin it is not doing it. You may want to double check. You can use a utility such as tcpview to verify or something more powerful like Wireshark.<br></div><div id="yui_3_16_0_ym19_1_1501774092082_14868"><br></div><div id="yui_3_16_0_ym19_1_1501774092082_17258"><br></div><div id="yui_3_16_0_ym19_1_1501774092082_17259" dir="ltr">Regards,<br></div></div><div style="display: block;" id="yui_3_16_0_ym19_1_1501774092082_12980" class="yahoo_quoted"> <div id="yui_3_16_0_ym19_1_1501774092082_12979" style="font-family: Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13px;"> <div id="yui_3_16_0_ym19_1_1501774092082_12978" style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div id="yui_3_16_0_ym19_1_1501774092082_12977" dir="ltr"> <font id="yui_3_16_0_ym19_1_1501774092082_12988" size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> Dheeraj Gautam <dheeraj.gautam@arborfs.com><br> <b><span style="font-weight: bold;">To:</span></b> Liz Turi <lturi@maehc.org>; cbrowne@cbcs-usa.com; stunnel-users@stunnel.org <br><b id="yui_3_16_0_ym19_1_1501774092082_17567"><span id="yui_3_16_0_ym19_1_1501774092082_17566" style="font-weight: bold;">Cc:</span></b> Ishu Singh <ishu.singh@arborfs.com>; Gurpreet Ahuja <gurpreet.ahuja@arborfs.com>; Sumit Sharma <sumit.sharma@arborfs.com><br> <b><span style="font-weight: bold;">Sent:</span></b> Thursday, August 3, 2017 7:46 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: [stunnel-users] Stunnel Connectivity Issue<br> </font> </div> <div id="yui_3_16_0_ym19_1_1501774092082_13031" class="y_msg_container"><br><div id="yiv6620247297"><style><!--
#yiv6620247297
_filtered #yiv6620247297 {font-family:"Cambria Math";panose-1:2 4 5 3 5 4 6 3 2 4;}
_filtered #yiv6620247297 {font-family:Calibri;panose-1:2 15 5 2 2 2 4 3 2 4;}
_filtered #yiv6620247297 {font-family:Consolas;panose-1:2 11 6 9 2 2 4 3 2 4;}
_filtered #yiv6620247297 {}
#yiv6620247297
#yiv6620247297 p.yiv6620247297MsoNormal, #yiv6620247297 li.yiv6620247297MsoNormal, #yiv6620247297 div.yiv6620247297MsoNormal
{margin:0in;margin-bottom:.0001pt;font-size:12.0pt;font-family:"Times New Roman", serif;color:black;}
#yiv6620247297 a:link, #yiv6620247297 span.yiv6620247297MsoHyperlink
{color:blue;text-decoration:underline;}
#yiv6620247297 a:visited, #yiv6620247297 span.yiv6620247297MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
#yiv6620247297 pre
{margin:0in;margin-bottom:.0001pt;font-size:10.0pt;font-family:"Courier New";color:black;}
#yiv6620247297 span.yiv6620247297HTMLPreformattedChar
{font-family:Consolas;color:black;}
#yiv6620247297 p.yiv6620247297msonormal0, #yiv6620247297 li.yiv6620247297msonormal0, #yiv6620247297 div.yiv6620247297msonormal0
{margin-right:0in;margin-left:0in;font-size:12.0pt;font-family:"Times New Roman", serif;color:black;}
#yiv6620247297 span.yiv6620247297EmailStyle20
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle21
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle22
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle23
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle24
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle25
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle26
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle27
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle28
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 span.yiv6620247297EmailStyle31
{font-family:"Calibri", sans-serif;color:windowtext;}
#yiv6620247297 .yiv6620247297MsoChpDefault
{font-size:10.0pt;}
_filtered #yiv6620247297 {margin:1.0in 1.0in 1.0in 1.0in;}
#yiv6620247297 div.yiv6620247297WordSection1
{}
--></style><div id="yui_3_16_0_ym19_1_1501774092082_13030"><div id="yui_3_16_0_ym19_1_1501774092082_13029" class="yiv6620247297WordSection1"><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Hi Liz,</span></div><div id="yui_3_16_0_ym19_1_1501774092082_13028" class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">The logs are being generating only when I am doing telnet to myself like telnet 127.0.0.1 9260.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div id="yui_3_16_0_ym19_1_1501774092082_13034" class="yiv6620247297MsoNormal"><span id="yui_3_16_0_ym19_1_1501774092082_13033" style="font-size:11.0pt;color:windowtext;">No logs are coming while running the application.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div id="yui_3_16_0_ym19_1_1501774092082_17570" class="yiv6620247297MsoNormal"><span id="yui_3_16_0_ym19_1_1501774092082_17569" style="font-size:11.0pt;color:windowtext;">Could you please remote my machine so that you can get complete understanding about the setup.</span></div><div id="yui_3_16_0_ym19_1_1501774092082_13036" class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div id="yui_3_16_0_ym19_1_1501774092082_13038" class="yiv6620247297MsoNormal"><span id="yui_3_16_0_ym19_1_1501774092082_17572" style="font-size:11.0pt;color:windowtext;">Regards,</span></div><div id="yui_3_16_0_ym19_1_1501774092082_13040" class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div id="yui_3_16_0_ym19_1_1501774092082_13042" class="yiv6620247297MsoNormal"><span id="yui_3_16_0_ym19_1_1501774092082_13044" style="font-size:11.0pt;color:windowtext;">Dheeraj Gautam</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;">From:</span></b><span style="font-size:11.0pt;color:windowtext;"> Liz Turi [mailto:<a rel="nofollow" ymailto="mailto:lturi@maehc.org" target="_blank" href="mailto:lturi@maehc.org">lturi@maehc.org</a>] <br><b>Sent:</b> Thursday, August 3, 2017 6:13 PM<br><b>To:</b> Dheeraj Gautam <<a rel="nofollow" ymailto="mailto:dheeraj.gautam@arborfs.com" target="_blank" href="mailto:dheeraj.gautam@arborfs.com">dheeraj.gautam@arborfs.com</a>>; <a rel="nofollow" ymailto="mailto:cbrowne@cbcs-usa.com" target="_blank" href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Cc:</b> Gurpreet Ahuja <<a rel="nofollow" ymailto="mailto:gurpreet.ahuja@arborfs.com" target="_blank" href="mailto:gurpreet.ahuja@arborfs.com">gurpreet.ahuja@arborfs.com</a>>; Sumit Sharma <<a rel="nofollow" ymailto="mailto:sumit.sharma@arborfs.com" target="_blank" href="mailto:sumit.sharma@arborfs.com">sumit.sharma@arborfs.com</a>>; Ishu Singh <<a rel="nofollow" ymailto="mailto:ishu.singh@arborfs.com" target="_blank" href="mailto:ishu.singh@arborfs.com">ishu.singh@arborfs.com</a>><br><b>Subject:</b> RE: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><a href="" rel="nofollow" name="_MailEndCompose"><span style="font-size:11.0pt;color:windowtext;">This looks like you’re successfully negotiating your client connection to the remote server, but there’s no data being transferred. </span></a></div><div class="yiv6620247297MsoNormal"><span style=""><span style="font-size:11.0pt;color:windowtext;"> </span></span></div><div><div class="yiv6620247297MsoNormal"><span style=""><b><span style="font-size:11.0pt;">Liz Turi</span></b></span><span style=""><span style="font-size:11.0pt;"></span></span></div><div class="yiv6620247297MsoNormal"><span style=""><span style="font-size:11.0pt;">Sr. Consultant</span></span></div><div class="yiv6620247297MsoNormal"><span style=""><span style="font-size:11.0pt;">Massachusetts </span></span><span style=""><span style="font-size:11.0pt;color:red;">e</span></span><span style=""><span style="font-size:11.0pt;">Health Collaborative</span></span><span style=""><span style="font-size:11.0pt;color:windowtext;"></span></span></div><div class="yiv6620247297MsoNormal"><span style=""><span style="font-size:11.0pt;">860 Winter Street, Waltham, MA 02451</span></span></div><div class="yiv6620247297MsoNormal"><span style=""><span style="font-size:11.0pt;">(m) 339-222-6614 (o) 781-907-7204 (f) 781-207-8589</span></span></div><div class="yiv6620247297MsoNormal"><span style=""></span><a rel="nofollow" target="_blank" href="http://www.maehc.org/"><span style=""><span style="font-size:11.0pt;">www.maehc.org</span></span><span style=""></span></a><span style=""><span style="font-size:11.0pt;color:windowtext;"></span></span></div><div class="yiv6620247297MsoNormal"><span style=""></span><a rel="nofollow" target="_blank" href="https://www.facebook.com/massachusettsehealthcollab?fref=nf"><span style=""><span style="font-size:11.0pt;text-decoration:none;"><img data-id="2035c008-4199-3d05-834e-81a71b9f3e39" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1025" src="cid:V5PqBZ7EARquHU7LudWe" alt="fb_icon" border="0" height="24" width="24"></span></span><span style=""></span></a><a rel="nofollow" target="_blank" href="https://www.linkedin.com/company/massachusetts-ehealth-collaborative?trk=tyah&trkInfo=clickedVertical%3Acompany%2Cidx%3A1-1-1%2CtarId%3A1432746657126%2Ctas%3AMassachusetts+eHEalth"><span style=""><span style="font-size:11.0pt;text-decoration:none;"><img data-id="1eace4cc-0f76-09b4-ebb4-fb4dfa640657" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1026" src="cid:MvH5sRa1n5R7xaGoLbvI" alt="li_icon" border="0" height="24" width="24"></span></span><span style=""></span></a><a rel="nofollow" target="_blank" href="https://twitter.com/MAeHC_org"><span style=""><span style="font-size:11.0pt;text-decoration:none;"><img data-id="125ffc6b-01bf-ba14-2073-cd9a6f5527aa" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1027" src="cid:80bfqH1sw54gDZa7dBzz" alt="tw_icon" border="0" height="24" width="24"></span></span><span style=""></span></a><span style=""><span style="font-size:11.0pt;color:windowtext;"></span></span></div></div><div class="yiv6620247297MsoNormal"><span style=""><span style="font-size:11.0pt;color:windowtext;"> </span></span></div><span style=""></span><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;">From:</span></b><span style="font-size:11.0pt;color:windowtext;"> Dheeraj Gautam [<a rel="nofollow" ymailto="mailto:dheeraj.gautam@arborfs.com" target="_blank" href="mailto:dheeraj.gautam@arborfs.com">mailto:dheeraj.gautam@arborfs.com</a>] <br><b>Sent:</b> Thursday, August 3, 2017 8:38 AM<br><b>To:</b> Liz Turi <<a rel="nofollow" ymailto="mailto:lturi@maehc.org" target="_blank" href="mailto:lturi@maehc.org">lturi@maehc.org</a>>; <a rel="nofollow" ymailto="mailto:cbrowne@cbcs-usa.com" target="_blank" href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Cc:</b> Gurpreet Ahuja <<a rel="nofollow" ymailto="mailto:gurpreet.ahuja@arborfs.com" target="_blank" href="mailto:gurpreet.ahuja@arborfs.com">gurpreet.ahuja@arborfs.com</a>>; Sumit Sharma <<a rel="nofollow" ymailto="mailto:sumit.sharma@arborfs.com" target="_blank" href="mailto:sumit.sharma@arborfs.com">sumit.sharma@arborfs.com</a>>; Ishu Singh <<a rel="nofollow" ymailto="mailto:ishu.singh@arborfs.com" target="_blank" href="mailto:ishu.singh@arborfs.com">ishu.singh@arborfs.com</a>><br><b>Subject:</b> RE: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Hi Liz,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Find attached stunnel log herewith, yes the configured remote server IP address and port details are correct.</span></div><div class="yiv6620247297MsoNormal" style="background:white;"><span style="font-size:11.0pt;color:windowtext;">At remote end they have allowed our source address and they are getting an error during TLS handshake, the issue appears to be with the TLS certificate and are sending them back resulting in the handshake error.</span></div><div class="yiv6620247297MsoNormal" style="background:white;"><span style="font-size:11.0pt;color:windowtext;">Also, please let us know if we can have a call with you and remote session to get this fix.</span></div><div class="yiv6620247297MsoNormal" style="background:white;"><span style="font-size:11.0pt;color:windowtext;">I will be thankful to you.</span></div><div class="yiv6620247297MsoNormal" style="background:white;"><span style="font-size:11.0pt;color:windowtext;">Regards,</span></div><div class="yiv6620247297MsoNormal" style="background:white;"><span style="font-size:11.0pt;color:windowtext;">Dheeraj Gautam</span></div><div class="yiv6620247297MsoNormal" style=""><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;">From:</span></b><span style="font-size:11.0pt;color:windowtext;"> Liz Turi [mailto:<a rel="nofollow" ymailto="mailto:lturi@maehc.org" target="_blank" href="mailto:lturi@maehc.org">lturi@maehc.org</a>] <br><b>Sent:</b> Thursday, August 3, 2017 5:58 PM<br><b>To:</b> Dheeraj Gautam <<a rel="nofollow" ymailto="mailto:dheeraj.gautam@arborfs.com" target="_blank" href="mailto:dheeraj.gautam@arborfs.com">dheeraj.gautam@arborfs.com</a>>; <a rel="nofollow" ymailto="mailto:cbrowne@cbcs-usa.com" target="_blank" href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Cc:</b> Gurpreet Ahuja <<a rel="nofollow" ymailto="mailto:gurpreet.ahuja@arborfs.com" target="_blank" href="mailto:gurpreet.ahuja@arborfs.com">gurpreet.ahuja@arborfs.com</a>>; Sumit Sharma <<a rel="nofollow" ymailto="mailto:sumit.sharma@arborfs.com" target="_blank" href="mailto:sumit.sharma@arborfs.com">sumit.sharma@arborfs.com</a>>; Ishu Singh <<a rel="nofollow" ymailto="mailto:ishu.singh@arborfs.com" target="_blank" href="mailto:ishu.singh@arborfs.com">ishu.singh@arborfs.com</a>><br><b>Subject:</b> RE: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">What do your debug logs say? What happens when you send a test message through? Are you sure you have the remote IP address/port correct? Is there IP filtering or a firewall in place between the two?</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">Liz Turi</span></b></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Sr. Consultant</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Massachusetts </span><span style="font-size:11.0pt;color:red;">e</span><span style="font-size:11.0pt;">Health Collaborative</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">860 Winter Street, Waltham, MA 02451</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">(m) 339-222-6614 (o) 781-907-7204 (f) 781-207-8589</span></div><div class="yiv6620247297MsoNormal"><a rel="nofollow" target="_blank" href="http://www.maehc.org/"><span style="font-size:11.0pt;">www.maehc.org</span></a></div><div class="yiv6620247297MsoNormal"><a rel="nofollow" target="_blank" href="https://www.facebook.com/massachusettsehealthcollab?fref=nf"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="3009cb3f-0db7-27cf-cd5c-77eda6dc97f2" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1028" src="cid:vUKFpN6Yc4il3fGNulAH" alt="fb_icon" border="0" height="24" width="24"></span></a><a rel="nofollow" target="_blank" href="https://www.linkedin.com/company/massachusetts-ehealth-collaborative?trk=tyah&trkInfo=clickedVertical%3Acompany%2Cidx%3A1-1-1%2CtarId%3A1432746657126%2Ctas%3AMassachusetts+eHEalth"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="7ad33223-6acc-0be6-db16-1ea588f73a9a" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1029" src="cid:7bGrrxzdo1IEwz1Eaamo" alt="li_icon" border="0" height="24" width="24"></span></a><a rel="nofollow" target="_blank" href="https://twitter.com/MAeHC_org"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="25ba50eb-dd60-9953-5e55-f1a4c5934934" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1030" src="cid:hM42rlXnWdyPFZiH1PRW" alt="tw_icon" border="0" height="24" width="24"></span></a></div></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;">From:</span></b><span style="font-size:11.0pt;color:windowtext;"> Dheeraj Gautam [<a rel="nofollow" ymailto="mailto:dheeraj.gautam@arborfs.com" target="_blank" href="mailto:dheeraj.gautam@arborfs.com">mailto:dheeraj.gautam@arborfs.com</a>] <br><b>Sent:</b> Thursday, August 3, 2017 5:27 AM<br><b>To:</b> Liz Turi <<a rel="nofollow" ymailto="mailto:lturi@maehc.org" target="_blank" href="mailto:lturi@maehc.org">lturi@maehc.org</a>>; <a rel="nofollow" ymailto="mailto:cbrowne@cbcs-usa.com" target="_blank" href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Cc:</b> Gurpreet Ahuja <<a rel="nofollow" ymailto="mailto:gurpreet.ahuja@arborfs.com" target="_blank" href="mailto:gurpreet.ahuja@arborfs.com">gurpreet.ahuja@arborfs.com</a>>; Sumit Sharma <<a rel="nofollow" ymailto="mailto:sumit.sharma@arborfs.com" target="_blank" href="mailto:sumit.sharma@arborfs.com">sumit.sharma@arborfs.com</a>>; Ishu Singh <<a rel="nofollow" ymailto="mailto:ishu.singh@arborfs.com" target="_blank" href="mailto:ishu.singh@arborfs.com">ishu.singh@arborfs.com</a>><br><b>Subject:</b> RE: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Hi Liz,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">We have stuck badly to establish stunnel connection with one of our partner, We have configured Client mode configuration on our server to connect server to run the application.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Below is the config which We have done on my server:</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">; ***************************************** Example TLS Client mode services</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">; Certificate</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">cert = Talomoncert.pem</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">key = Talomonkey.pem</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">CAfile = TalomonCACerts.pem</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">;FIPS</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">fips=no</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">; Protocol version (all, SSLv2, SSLv3, TLSv1)</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">sslVersion = TLSv1.2</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">; Some performance tunings </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">socket = l:TCP_NODELAY=1 </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">socket = r:TCP_NODELAY=1 </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">; Some debugging stuff useful for troubleshooting </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">debug = 7 </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">output = stunnel.log </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">; Use it for client mode </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">client = yes</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">; Service-level configuration</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">[FIX] </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">accept = <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://127.0.0.1:9260/">127.0.0.1:9260</a></span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">connect = <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://69.191.230.34:8228/">69.191.230.34:8228</a></span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">;protocol=connect</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">;protocolHost= <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://69.191.230.34:8228/">69.191.230.34:8228</a></span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">TIMEOUTconnect = 5</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Our partner saying that they are not getting any TLS connection on their server due to which connection is not establishing.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Could you please help us to get this sort out as we have no more idea how we can troubleshoot this.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Thanks in advance.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Regards,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Dheeraj Gautam</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;">From:</span></b><span style="font-size:11.0pt;color:windowtext;"> Liz Turi [mailto:<a rel="nofollow" ymailto="mailto:lturi@maehc.org" target="_blank" href="mailto:lturi@maehc.org">lturi@maehc.org</a>] <br><b>Sent:</b> Tuesday, June 13, 2017 11:40 PM<br><b>To:</b> Dheeraj Gautam <<a rel="nofollow" ymailto="mailto:dheeraj.gautam@arborfs.com" target="_blank" href="mailto:dheeraj.gautam@arborfs.com">dheeraj.gautam@arborfs.com</a>>; <a rel="nofollow" ymailto="mailto:cbrowne@cbcs-usa.com" target="_blank" href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Subject:</b> RE: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Hi, Dheeraj,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Your logs say that you’re connecting successfully to the port that your application is listening on. Have you tried testing from the application, or calls to the application?</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">This line (along with the next couple of lines) suggest that telnet is connecting through to the remote host listening on 8228. </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal">2017.06.13 16:38:38 LOG5[11]: s_connect: connected <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://69.191.198.34:8228/">69.191.198.34:8228</a></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;"> </span></b></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">It closes the connection via telnet because telnet isn’t going to run your application for you.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">We need more information about how you’re connecting to your application? (or intending to)</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">Liz Turi</span></b></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Sr. Consultant</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Massachusetts </span><span style="font-size:11.0pt;color:red;">e</span><span style="font-size:11.0pt;">Health Collaborative</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">860 Winter Street, Waltham, MA 02451</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">(m) 339-222-6614 (o) 781-907-7204 (f) 781-207-8589</span></div><div class="yiv6620247297MsoNormal"><a rel="nofollow" target="_blank" href="http://www.maehc.org/"><span style="font-size:11.0pt;">www.maehc.org</span></a></div><div class="yiv6620247297MsoNormal"><a rel="nofollow" target="_blank" href="https://www.facebook.com/massachusettsehealthcollab?fref=nf"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="3e2fb54c-dbd2-69c5-c71a-f5d7ae31a82b" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1031" src="cid:YusM7GbXoh4Gm8XgbH03" alt="fb_icon" border="0" height="24" width="24"></span></a><a rel="nofollow" target="_blank" href="https://www.linkedin.com/company/massachusetts-ehealth-collaborative?trk=tyah&trkInfo=clickedVertical%3Acompany%2Cidx%3A1-1-1%2CtarId%3A1432746657126%2Ctas%3AMassachusetts+eHEalth"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="f3226c0d-d5ba-a0d9-52cc-7afdd7f46f4d" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1032" src="cid:lgPLMjWZpkTS8w5wCJnD" alt="li_icon" border="0" height="24" width="24"></span></a><a rel="nofollow" target="_blank" href="https://twitter.com/MAeHC_org"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="80b909ef-51cb-a49e-6e32-4eb227d2b4f7" style="width:.25in;min-height:.25in;" id="yiv6620247297_x0000_i1033" src="cid:bDQ9A1rf2BiUFciEiIIB" alt="tw_icon" border="0" height="24" width="24"></span></a></div></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;">From:</span></b><span style="font-size:11.0pt;color:windowtext;"> stunnel-users [<a rel="nofollow" ymailto="mailto:stunnel-users-bounces@stunnel.org" target="_blank" href="mailto:stunnel-users-bounces@stunnel.org">mailto:stunnel-users-bounces@stunnel.org</a>] <b>On Behalf Of </b>Dheeraj Gautam<br><b>Sent:</b> Tuesday, June 13, 2017 1:21 PM<br><b>To:</b> <a rel="nofollow" ymailto="mailto:cbrowne@cbcs-usa.com" target="_blank" href="mailto:cbrowne@cbcs-usa.com">cbrowne@cbcs-usa.com</a>; <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Subject:</b> Re: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Hi Browne,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">I am not understand like what config I have to do in stunnel config file.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">As per application it will trigger 8228 port of remote server, but at the momen stunnel is working only when I am trying to telnet localhost on 9233 port.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Nothing is happening when running the application, don’t know what I am missing as I am the new for stunnel.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Please help to fix this out.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Regards,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;">Dheeraj Gautam</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;color:windowtext;"> </span></div><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;color:windowtext;">From:</span></b><span style="font-size:11.0pt;color:windowtext;"> stunnel-users [<a rel="nofollow" ymailto="mailto:stunnel-users-bounces@stunnel.org" target="_blank" href="mailto:stunnel-users-bounces@stunnel.org">mailto:stunnel-users-bounces@stunnel.org</a>] <b>On Behalf Of </b>Carter Browne<br><b>Sent:</b> Tuesday, June 13, 2017 10:41 PM<br><b>To:</b> <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Subject:</b> Re: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div>Dheeraj,</div><div>stunnel will keep the connection open for as long as your applications keeps it open. When you exit telnet, it closes the connection. I use stunnel mostly for RDP, VNC and telnet and as long the application is active, the port is open. You need to have your application open the local port you want to route via stunnel (in your example <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://127.0.0.1:9233/">127.0.0.1:9233</a>). As long as your application keeps the connection open (ignoring such issues as communications failures), stunnel will maintain the application. Telnet is a great tool for determining connectivity, but your application is going to have to handle the connection going forward.</div><div>Carter Browne</div><div class="yiv6620247297MsoNormal"> </div><div><div class="yiv6620247297MsoNormal">On 6/13/2017 12:01 PM, Dheeraj Gautam wrote:</div></div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt;"><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Hi Liz,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Thanks for your reply.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Actually we need to run a service which will work only once stunnel connection establish and the service will work till the time connection connected.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">But at the moment I don’t have idea like how the stunnel will remain connected.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Could you please suggest me to fix this so that stunnel connection remain connected and I can run the application.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Waiting for your valuable response.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Regards,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Dheeraj Gautam</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in;"><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">From:</span></b><span style="font-size:11.0pt;"> Liz Turi [<a rel="nofollow" ymailto="mailto:lturi@maehc.org" target="_blank" href="mailto:lturi@maehc.org">mailto:lturi@maehc.org</a>] <br><b>Sent:</b> Tuesday, June 13, 2017 9:19 PM<br><b>To:</b> Dheeraj Gautam <a rel="nofollow" ymailto="mailto:dheeraj.gautam@arborfs.com" target="_blank" href="mailto:dheeraj.gautam@arborfs.com"><dheeraj.gautam@arborfs.com></a>; Małgorzata Olszówka <a rel="nofollow" ymailto="mailto:Malgorzata.Olszowka@stunnel.org" target="_blank" href="mailto:Malgorzata.Olszowka@stunnel.org"><Malgorzata.Olszowka@stunnel.org></a><br><b>Cc:</b> <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Subject:</b> RE: [stunnel-users] Stunnel Connectivity Issue</span></div></div></div><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Hi, Dheeraj,</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Are you testing the connection with Telnet? Or are you testing with the application. What I noticed in testing the connection is that once the command is completed, the connection is closed.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">However, when I test from my application, its only closed once all transactions in that session are completed, and will show how much data was passed on (following from my logs at the end of a non-telnet test session.</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">2017.06.13 10:16:08 LOG6[1]: Negotiated TLSv1.2 ciphersuite AES256-GCM-SHA384 (256-bit encryption)</span></b></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">2017.06.13 10:16:18 LOG6[1]: Read socket closed (readsocket)</span></b></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">2017.06.13 10:16:18 LOG6[1]: SSL_shutdown successfully sent close_notify alert</span></b></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">2017.06.13 10:16:18 LOG6[1]: TLS closed (SSL_read)</span></b></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">2017.06.13 10:16:18 LOG5[1]: Connection closed: 2791 byte(s) sent to TLS, 1641 byte(s) sent to socket</span></b></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">Liz Turi</span></b></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Sr. Consultant</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">Massachusetts </span><span style="font-size:11.0pt;color:red;">e</span><span style="font-size:11.0pt;">Health Collaborative</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">860 Winter Street, Waltham, MA 02451</span></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;">(m) 339-222-6614 (o) 781-907-7204 (f) 781-207-8589</span></div><div class="yiv6620247297MsoNormal"><a rel="nofollow" target="_blank" href="http://www.maehc.org/"><span style="font-size:11.0pt;">www.maehc.org</span></a></div><div class="yiv6620247297MsoNormal"><a rel="nofollow" target="_blank" href="https://www.facebook.com/massachusettsehealthcollab?fref=nf"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="f349c9ba-de65-f662-11d3-f2e5f36b6883" style="width:.25in;min-height:.25in;" id="yiv6620247297Picture_x0020_1" src="cid:Z5wvS5bFG2K8UxsNrtvq" alt="fb_icon" border="0" height="24" width="24"></span></a><a rel="nofollow" target="_blank" href="https://www.linkedin.com/company/massachusetts-ehealth-collaborative?trk=tyah&trkInfo=clickedVertical%3Acompany%2Cidx%3A1-1-1%2CtarId%3A1432746657126%2Ctas%3AMassachusetts+eHEalth"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="7f15837f-d3f7-9524-f9ae-2f70e4998e96" style="width:.25in;min-height:.25in;" id="yiv6620247297Picture_x0020_2" src="cid:qLyNkxVeVY8NBPpB7vLN" alt="li_icon" border="0" height="24" width="24"></span></a><a rel="nofollow" target="_blank" href="https://twitter.com/MAeHC_org"><span style="font-size:11.0pt;text-decoration:none;"><img data-id="25f28dc3-217b-ef1e-3567-e4a074810b18" style="width:.25in;min-height:.25in;" id="yiv6620247297Picture_x0020_3" src="cid:nWjopG7lXiOJMZwI2blp" alt="tw_icon" border="0" height="24" width="24"></span></a></div><div class="yiv6620247297MsoNormal"><span style="font-size:11.0pt;"> </span></div><div class="yiv6620247297MsoNormal"><b><span style="font-size:11.0pt;">From:</span></b><span style="font-size:11.0pt;"> stunnel-users [<a rel="nofollow" ymailto="mailto:stunnel-users-bounces@stunnel.org" target="_blank" href="mailto:stunnel-users-bounces@stunnel.org">mailto:stunnel-users-bounces@stunnel.org</a>] <b>On Behalf Of </b>Dheeraj Gautam<br><b>Sent:</b> Tuesday, June 13, 2017 11:41 AM<br><b>To:</b> Małgorzata Olszówka <<a rel="nofollow" ymailto="mailto:Malgorzata.Olszowka@stunnel.org" target="_blank" href="mailto:Malgorzata.Olszowka@stunnel.org">Malgorzata.Olszowka@stunnel.org</a>><br><b>Cc:</b> <a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><b>Subject:</b> Re: [stunnel-users] Stunnel Connectivity Issue</span></div><div class="yiv6620247297MsoNormal"> </div><div><div class="yiv6620247297MsoNormal">HI Guys,</div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div class="yiv6620247297MsoNormal">below is the config which i have configured with TLSv1.2, but still connection establishing only for while when i telnet telnet 127.0.0.1 9233. and just after connection closed.</div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div><div class="yiv6620247297MsoNormal">[TCP]</div></div><div><div class="yiv6620247297MsoNormal">client=yes</div></div><div><div class="yiv6620247297MsoNormal">cert = BBG_cert.pem</div></div><div><div class="yiv6620247297MsoNormal">key = BBG_key.pem</div></div><div><div class="yiv6620247297MsoNormal">verifyChain = yes</div></div><div><div class="yiv6620247297MsoNormal">CAfile = BBG_CACerts.pem</div></div><div><div class="yiv6620247297MsoNormal">connect = <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://69.191.198.34:8228/">69.191.198.34:8228</a></div></div><div><div class="yiv6620247297MsoNormal">accept = <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://127.0.0.1:9233/">127.0.0.1:9233</a></div></div><div><div class="yiv6620247297MsoNormal">sslVersion = TLSv1.2</div></div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div class="yiv6620247297MsoNormal">below the logs:</div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div><div class="yiv6620247297MsoNormal">2017.06.13 11:57:49 LOG5[main]: Reading configuration from file stunnel.conf</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 11:57:49 LOG5[main]: UTF-8 byte order mark detected</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 11:57:49 LOG5[main]: FIPS mode disabled</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 11:57:49 LOG3[main]: Service [TCP]: Each service must define two endpoints</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 11:57:49 LOG3[main]: Failed to reload the configuration file</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:37:16 LOG5[main]: Reading configuration from file stunnel.conf</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:37:16 LOG5[main]: UTF-8 byte order mark detected</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:37:16 LOG5[main]: FIPS mode disabled</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:37:16 LOG4[main]: Service [TCP] uses "verifyChain" without subject checks</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:37:16 LOG4[main]: Use "checkHost" or "checkIP" to restrict trusted certificates</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:37:16 LOG5[main]: Configuration successful</div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:38:38 LOG5[11]: Service [TCP] accepted connection from <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://127.0.0.1:62736/">127.0.0.1:62736</a></div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:38:38 LOG5[11]: s_connect: connected <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://69.191.198.34:8228/">69.191.198.34:8228</a></div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:38:38 LOG5[11]: Service [TCP] connected remote server from <a rel="nofollow" target="_blank" onclick="return window.theMainWindow.showLinkWarning(this)" href="http://172.16.1.23:62737/">172.16.1.23:62737</a></div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:38:39 LOG5[11]: Certificate accepted at depth=0: C=US, ST=NEW YORK, L=NEW YORK, O=Bloomberg LP, OU=FIXBETA, CN=<a rel="nofollow" target="_blank" href="http://fixbeta.bloomberg.com/">fixbeta.bloomberg.com</a>, emailAddress=<a rel="nofollow" ymailto="mailto:caadmin@bloomberg.com" target="_blank" href="mailto:caadmin@bloomberg.com">caadmin@bloomberg.com</a></div></div><div><div class="yiv6620247297MsoNormal">2017.06.13 16:39:10 LOG5[11]: Connection closed: 0 byte(s) sent to TLS, 0 byte(s) sent to socket</div></div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div class="yiv6620247297MsoNormal">i want connection remained connected every time so that i can run the application.</div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div class="yiv6620247297MsoNormal">application can be work only if the connection remain connected.</div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div class="yiv6620247297MsoNormal">please help me to sort this out.</div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div class="yiv6620247297MsoNormal">Regards,</div></div><div><div class="yiv6620247297MsoNormal"> </div></div><div><div class="yiv6620247297MsoNormal">Dheeraj Gautam</div></div></div><div><div class="yiv6620247297MsoNormal"> </div><div><div class="yiv6620247297MsoNormal">On 25 May 2017 at 12:29, Małgorzata Olszówka <<a rel="nofollow" ymailto="mailto:Malgorzata.Olszowka@stunnel.org" target="_blank" href="mailto:Malgorzata.Olszowka@stunnel.org">Malgorzata.Olszowka@stunnel.org</a>> wrote:</div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt;"><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0in;margin-bottom:5.0pt;"><div class="yiv6620247297MsoNormal">Could you please let us know what parameters we are missing here due to which connection is not establishing with remote server.<br><br>Although, stunnel logs indicating that configuration successful, but in logs no where is mentioned about the connection is it connected or not, </div></blockquote><div class="yiv6620247297MsoNormal"><br><br>Hello Dheeraj,<br><br>You should set the verifyChain option in order to verify the certificate stored in the file specified with CAfile:<br>verifyChain = yes<br><br>Then you can test your connection:<br>telnet 127.0.0.1 9233<br>the stunnel logs will show information about the connection attempt.<br><br>Regards,<br>Małgorzata<br>_______________________________________________<br>stunnel-users mailing list<br><a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><a rel="nofollow" target="_blank" href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a></div></blockquote></div><div class="yiv6620247297MsoNormal"> </div></div><div class="yiv6620247297MsoNormal"> </div><div><span style="font-size:7.5pt;"><a rel="nofollow" target="_blank" href="http://www.arborfs.com/">www.arborfs.com</a></span></div><div><span style="font-size:7.5pt;color:gray;">This e-mail and any attachment are confidential and contain proprietary information, some or all of which may be legally privileged.</span></div><div><span style="font-size:7.5pt;color:gray;">It is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient, please notify the author immediately by telephone or by replying to this e-mail, and then delete all copies of the e-mail on your system. If you are not the intended recipient, you must not use, disclose, distribute, copy, print or rely on this e-mail.</span></div><div><span style="font-size:7.5pt;color:gray;">Whilst we have taken reasonable precautions to ensure that this e-mail and any attachment has been checked for viruses, we cannot guarantee that they are virus free and we cannot accept liability for any damage sustained as a result of software viruses. We would advise that you carry out your own virus checks, especially before opening an attachment.</span></div><div><br>CONFIDENTIALITY NOTICE<br>The information contained in this email transmission is legally privileged and confidential information intended only for the use of the addressee named above. If the reader of this message is not the intended recipient you are hereby notified that any dissemination, distribution or copying of this email transmission is strictly prohibited. If you have received this email transmission in error, please notify us immediately. Thank you.</div><div class="yiv6620247297MsoNormal"> </div><div><span style="font-size:7.5pt;"><a rel="nofollow" target="_blank" href="http://www.arborfs.com/">www.arborfs.com</a></span></div><div><span style="font-size:7.5pt;color:gray;">This e-mail and any attachment are confidential and contain proprietary information, some or all of which may be legally privileged.</span></div><div><span style="font-size:7.5pt;color:gray;">It is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient, please notify the author immediately by telephone or by replying to this e-mail, and then delete all copies of the e-mail on your system. If you are not the intended recipient, you must not use, disclose, distribute, copy, print or rely on this e-mail.</span></div><div><span style="font-size:7.5pt;color:gray;">Whilst we have taken reasonable precautions to ensure that this e-mail and any attachment has been checked for viruses, we cannot guarantee that they are virus free and we cannot accept liability for any damage sustained as a result of software viruses. We would advise that you carry out your own virus checks, especially before opening an attachment.</span></div><div class="yiv6620247297MsoNormal" style="margin-bottom:12.0pt;"> </div><pre>_______________________________________________</pre><pre>stunnel-users mailing list</pre><pre><a rel="nofollow" ymailto="mailto:stunnel-users@stunnel.org" target="_blank" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a></pre><pre><a rel="nofollow" target="_blank" href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a></pre></blockquote><div class="yiv6620247297MsoNormal"> </div><div class="yiv6620247297MsoNormal"><span style="color:windowtext;"> </span></div><div><span style="font-size:7.5pt;"><a rel="nofollow" target="_blank" href="http://www.arborfs.com/">www.arborfs.com</a></span></div><div><span style="font-size:7.5pt;color:gray;">This e-mail and any attachment are confidential and contain proprietary information, some or all of which may be legally privileged.</span></div><div><span style="font-size:7.5pt;color:gray;">It is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient, please notify the author immediately by telephone or by replying to this e-mail, and then delete all copies of the e-mail on your system. If you are not the intended recipient, you must not use, disclose, distribute, copy, print or rely on this e-mail.</span></div><div><span style="font-size:7.5pt;color:gray;">Whilst we have taken reasonable precautions to ensure that this e-mail and any attachment has been checked for viruses, we cannot guarantee that they are virus free and we cannot accept liability for any damage sustained as a result of software viruses. We would advise that you carry out your own virus checks, especially before opening an attachment.</span></div><div><br>CONFIDENTIALITY NOTICE<br>The information contained in this email transmission is legally privileged and confidential information intended only for the use of the addressee named above. If the reader of this message is not the intended recipient you are hereby notified that any dissemination, distribution or copying of this email transmission is strictly prohibited. If you have received this email transmission in error, please notify us immediately. Thank you.</div><div class="yiv6620247297MsoNormal"><span style="color:windowtext;"> </span></div><div><span style="font-size:7.5pt;"><a rel="nofollow" target="_blank" href="http://www.arborfs.com/">www.arborfs.com</a></span></div><div><span style="font-size:7.5pt;color:gray;">This e-mail and any attachment are confidential and contain proprietary information, some or all of which may be legally privileged.</span></div><div><span style="font-size:7.5pt;color:gray;">It is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient, please notify the author immediately by telephone or by replying to this e-mail, and then delete all copies of the e-mail on your system. If you are not the intended recipient, you must not use, disclose, distribute, copy, print or rely on this e-mail.</span></div><div><span style="font-size:7.5pt;color:gray;">Whilst we have taken reasonable precautions to ensure that this e-mail and any attachment has been checked for viruses, we cannot guarantee that they are virus free and we cannot accept liability for any damage sustained as a result of software viruses. We would advise that you carry out your own virus checks, especially before opening an attachment.</span></div><div><br>CONFIDENTIALITY NOTICE<br>The information contained in this email transmission is legally privileged and confidential information intended only for the use of the addressee named above. If the reader of this message is not the intended recipient you are hereby notified that any dissemination, distribution or copying of this email transmission is strictly prohibited. If you have received this email transmission in error, please notify us immediately. Thank you.</div><div class="yiv6620247297MsoNormal"><span style="color:windowtext;"> </span></div><div><span style="font-size:7.5pt;"><a rel="nofollow" target="_blank" href="http://www.arborfs.com/">www.arborfs.com</a></span></div><div><span style="font-size:7.5pt;color:gray;">This e-mail and any attachment are confidential and contain proprietary information, some or all of which may be legally privileged.</span></div><div><span style="font-size:7.5pt;color:gray;">It is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient, please notify the author immediately by telephone or by replying to this e-mail, and then delete all copies of the e-mail on your system. If you are not the intended recipient, you must not use, disclose, distribute, copy, print or rely on this e-mail.</span></div><div><span style="font-size:7.5pt;color:gray;">Whilst we have taken reasonable precautions to ensure that this e-mail and any attachment has been checked for viruses, we cannot guarantee that they are virus free and we cannot accept liability for any damage sustained as a result of software viruses. We would advise that you carry out your own virus checks, especially before opening an attachment.</span></div><div><br>CONFIDENTIALITY NOTICE<br>The information contained in this email transmission is legally privileged and confidential information intended only for the use of the addressee named above. If the reader of this message is not the intended recipient you are hereby notified that any dissemination, distribution or copying of this email transmission is strictly prohibited. If you have received this email transmission in error, please notify us immediately. Thank you.</div></div></div>
<br>
<div><font size="1"><span style=""><span style=""><a rel="nofollow" target="_blank" href="http://www.arborfs.com/">www.arborfs.com</a></span></span><span style="color:gray;"><br></span></font></div><div><font size="1"><span style="color:gray;">This e-mail and any attachment are
confidential and contain proprietary information, some or all of which may be
legally privileged.</span></font></div><div><font size="1"><span style="color:gray;">It is intended solely for the use of the
individual or entity to which it is addressed. If you are not the
intended recipient, please notify the author immediately by telephone or by
replying to this e-mail, and then delete all copies of the e-mail on your
system. If you are not the intended recipient, you must not use,
disclose, distribute, copy, print or rely on this e-mail.</span></font></div><div><font size="1"><span style="color:gray;">Whilst we have taken reasonable
precautions to ensure that this e-mail and any attachment has been checked for
viruses, we cannot guarantee that they are virus free and we cannot accept
liability for any damage sustained as a result of software viruses. We
would advise that you carry out your own virus checks, especially before
opening an attachment.</span></font><span></span></div>
</div>_______________________________________________<br>stunnel-users mailing list<br><a ymailto="mailto:stunnel-users@stunnel.org" href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br><a href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><br><br><br></div> </div> </div> </div></div></body></html>