<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:#1F4E79;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F4E79">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">After overcoming some initial more obvious problems I have still been unable to get this client’s stunnel configured correctly.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">“No certificate or private key specified” – is this significant?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">Stunnel.conf looks like the below:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">debug = 2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">output = stunnel.log<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">CAfile=.\ca-verisign.crt<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">client=yes<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">verify=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">sslVersion = TLSv1.2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">options = NO_SSLv2<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">options = NO_SSLv3<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">[TRD]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">accept=16002<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">connect= our.ip.com:443<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">[INV]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">accept=16003<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">connect= our.ip.com:443<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">Stunnel output log below<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Found 1 ready file descriptor(s)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: FD=276 ifds=r-x ofds=---
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: FD=284 ifds=r-x ofds=---
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Dispatching signals from the signal pipe
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Processing SIGNAL_RELOAD_CONFIG
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Running on Windows 6.1
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG5[main]: Reading configuration from file stunnel.conf
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG5[main]: UTF-8 byte order mark detected
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG5[main]: FIPS mode disabled
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Compression disabled
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Snagged 64 random bytes from C:/.rnd
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Wrote 1024 new random bytes to C:/.rnd
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: PRNG seeded successfully
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG6[main]: Initializing service [TRD]
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Ciphers: HIGH:!DH:!aNULL:!SSLv2
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: TLS options: 0x03000004 (+0x03000000, -0x00000000)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: No certificate or private key specified
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG4[main]: Service [TRD] needs authentication to prevent MITM attacks
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG6[main]: Initializing service [INV]
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Ciphers: HIGH:!DH:!aNULL:!SSLv2
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: TLS options: 0x03000004 (+0x03000000, -0x00000000)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: No certificate or private key specified
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG4[main]: Service [INV] needs authentication to prevent MITM attacks
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG5[main]: Configuration successful
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Closing service [TRD]
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Service [TRD] closed (FD=284)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Service [TRD] closed
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Closing service [INV]
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Service [INV] closed (FD=276)
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">2017.10.12 10:53:22 LOG7[main]: Service [INV] closed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79">We tried giving the certification a hard location but still it seems unable to find it. Is there anything in the cfg you can see missing? Bearing in mind this is standard cfg for our clients connecting in.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F4E79"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D;mso-fareast-language:EN-GB">Kind regards,<o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="color:#1F497D;mso-fareast-language:EN-GB"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><b><span style="color:#1F497D;mso-fareast-language:EN-GB">Hugo Darley<o:p></o:p></span></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
The information contained in and accompanying this communication is strictly confidential and intended solely for the use of the intended recipient(s). If you have received it by mistake please let us know by reply and then delete it from your system; you should
not copy the message or disclose its content to anyone. MarketAxess reserves the right to monitor the content of emails sent to or from its systems. Any comments or statements made are not necessarily those of MarketAxess. For more information, please visit
www.marketaxess.com. MarketAxess Europe Limited is authorised and regulated by the UK Financial Conduct Authority, registered in England no. 4017610, registered office at 5 Aldermanbury Square, London EC2V 7HR. Telephone (020) 7709 3100. MarketAxess Corporation
is regulated in the USA by the SEC and FINRA, incorporated in Delaware, executive offices at 299 Park Avenue, New York, NY 10171. Telephone (1) 212 813 6000.
</body>
</html>