<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1028" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Hi Eric,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Thanks for the very detailed reply! I had a conversation direct with one of the stunnel devs, she confirmed that there’s a bug in the tests and supplied a patch. I guess this will be released in
the next version. It only affects the tests, so the current version is fine, as long as you don’t try to run the tests during installation.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr>
<td nowrap="" valign="top" style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="color:#141B4D">Regards,</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td nowrap="" valign="top" style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td width="60%" nowrap="" valign="top" style="width:60.0%;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif;color:#141B4D">Ian Bamforth</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<br>
Senior Software Engineer <br>
Operations & Planning Systems Division<br>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
T: </span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<a href="tel:00441133443970"><span style="color:gray;text-decoration:none">+44 (0)113 344 3970</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
M: </span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray"><a href="tel:00447852404240"><span style="color:gray;text-decoration:none">+44 (0)7852 404240</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
E: </span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<a href="mailto:Ian.Bamforth@tracsis.com"><span style="color:gray;text-decoration:none">Ian.Bamforth@tracsis.com</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
W:</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<a href="https://www.tracsis.com"><span style="color:gray;text-decoration:none">www.tracsis.com</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray"><a href="http://www.tracsisops.com"><span style="color:gray;text-decoration:none">www.tracsisops.com</span></a>
<o:p></o:p></span></p>
</td>
<td nowrap="" valign="top" style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D">Follow Us<br>
</span></b><a href="https://www.linkedin.com/company/972873?trk=tyah&trkInfo=idx:1-1-1,tarId:1420795682492,tas:tracsis"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;text-decoration:none"><img border="0" width="15" height="15" style="width:.1562in;height:.1562in" id="_x0000_i1028" src="https://static.tracsis.com/email/lin2.png" alt="https://static.tracsis.com/email/lin2.png"></span></b></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
</span><a href="https://www.twitter.com/tracsis"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;text-decoration:none"><img border="0" width="15" height="15" style="width:.1562in;height:.1562in" id="_x0000_i1027" src="https://static.tracsis.com/email/twi2.png" alt="https://static.tracsis.com/email/twi2.png"></span></a><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
<br>
Tracsis plc</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<br>
Leeds Innovation Centre <br>
103 Clarendon Road <br>
Leeds <br>
LS2 9DF <o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="600" nowrap="" colspan="2" valign="top" style="width:450.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="text-align:justify;line-height:90%;vertical-align:top">
<!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="_x0000_s1027" type="#_x0000_t75" alt="https://static.tracsis.com/email/award4.png" style='position:absolute;left:0;text-align:left;margin-left:170.05pt;margin-top:0;width:221.25pt;height:81pt;z-index:251661312;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:15pt;mso-wrap-distance-top:7.5pt;mso-wrap-distance-right:15pt;mso-wrap-distance-bottom:7.5pt;mso-position-horizontal:right;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:line;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page' o:allowoverlap="f">
<v:imagedata src="https://static.tracsis.com/email/award4.png" />
<w:wrap type="square" anchory="line"/>
</v:shape><![endif]--><![if !vml]><img width="295" height="108" style="width:3.0729in;height:1.125in" src="https://static.tracsis.com/email/award4.png" align="right" hspace="20" vspace="10" alt="https://static.tracsis.com/email/award4.png" v:shapes="_x0000_s1027"><![endif]><span style="font-size:7.0pt;line-height:90%;font-family:"Arial",sans-serif;color:gray"><br>
Tracsis Operations and Planning Systems Division is a Division of Tracsis plc and comprises Tracsis plc (05019106), Tracsis Rail Consultancy Limited (05047148), Safety Information Systems Limited trading as COMPASS (02588404) and Tracsis Retail and Operations
Limited (04225250), all subsidiaries of Tracsis plc with a registered office at Leeds Innovation Centre,103 Clarendon Road, Leeds, LS2 9DF. VAT Registration No: 945 7876 61. This email and its attachments may be confidential and are intended solely for the
use of the individual(s) to whom it is addressed. If you are not the intended recipient of this email and its attachments, you must take no action based upon them, nor must you copy or show them to anyone. Please contact the sender if you believe you have
received this email in error.<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Eric S Eberhard <flash@vicsmba.com>
<br>
<b>Sent:</b> 09 July 2018 22:20<br>
<b>To:</b> Ian Bamforth <Ian.Bamforth@tracsis.com>; stunnel-users@stunnel.org<br>
<b>Subject:</b> RE: [stunnel-users] Intermittent error in 042_inetd<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">The 50% could be because the server side is not fully updated – we have this problem a lot with very large companies that should know better (and in reality should overlap instead of changing over
– meaning allow SSLv3 for 3 months or something while also accepting TLSv2.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">A very good way to test is to get a telnet program. Then “telnent localhost port#” – the port # being the port number stunnel is running on. This will remove all variables except stunnel and allow
you to see the output. It could be you are connecting fine and failing some other authentication like a login – which you can see often with telnet. And set your firewall to not allow telnet on port 23. Also, we have found stunnel MUCH more reliable under
inetd (if you are on Unix of course) than as a stand-alone server. A little performance loss that is unnoticeable to us – big customers exchange 2-4 million XML documents a day (using stunnel) so inetd is definitely not the most efficient way, but the machines
are so darn fast it seems not to matter.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">The certificates have become more painful but I have never had to use an official signed one. I make my own with openssl. However, there are intermediate ones that are needed from whomever you
connect to if they have a signed certificate – say from Verisign – you may need your certificate and Verisigns, etc – in a chain.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">I use “cacert” to set to a large file of .pem certificates – which I simply download from the Web (available all over, some work, some don’t. When you get one that works … then use it. You can
modify them by adding anything not found in the file. Supposedly the cacert file I have now is good till 2020 for the big names.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">You can also use openssl to get the certificate from the server – just ask and you shall receive. It should have the entire chain.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">I used to have on massive cacert for everyone and it was getting out of hand. As tacky as it is, I just make a cacert.pem file for every connection (e.g. Walmart, Fedex, Target, whatever). This
allows working connections to keep working while you fiddle with a tricky one.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Eric<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0cm 0cm 1.0pt 0cm">
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Eric S Eberhard<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">VICS (Vertical Integrated Computer Systems)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Voice: 928 567 3529<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Cell : 928 301 7537 (not reliable except for text or if not home)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">2933 W Middle Verde Rd<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D">Camp Verde, AZ 86322<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> stunnel-users [<a href="mailto:stunnel-users-bounces@stunnel.org">mailto:stunnel-users-bounces@stunnel.org</a>]
<b>On Behalf Of </b>Ian Bamforth<br>
<b>Sent:</b> Wednesday, July 04, 2018 9:00 AM<br>
<b>To:</b> <a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<b>Subject:</b> [stunnel-users] Intermittent error in 042_inetd<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">Afternoon,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Until recently we’d disabled `make test` because of certificate problems – we’ve re-enabled it (using `make check`) but are getting intermittent failures (around 50% of CI runs). Below is the output from the logs – I can’t see what’s gone
wrong, can anyone shed any light?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Clients allowed=14648<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: errno: (*__errno_location ())<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Compression disabled<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: No PRNG seeding was required<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Ciphers: HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: TLS options: 0x02004004 (+0x00004000, -0x00000000)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Private key check succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: ECDH initialization<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: ECDH initialized with curve prime256v1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Binding service [server]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Listening file descriptor created (FD=6)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Setting accept socket options (FD=6)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Option SO_REUSEADDR set on accept socket<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Created pid file /opt/stunnel/stunnel-5.48/tests/logs/stunnel.pid<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[cron]: Cron thread initialized<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Found 1 ready file descriptor(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: FD=4 events=0x2001 revents=0x0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: FD=6 events=0x2001 revents=0x1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Service [server] accepted (FD=3) from 127.0.0.1:58890<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Service [server] started<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Setting local socket options (FD=3)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Option TCP_NODELAY set on local socket<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): before SSL initialization<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): before SSL initialization<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: SNI: no virtual services defined<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read client hello<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write server hello<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write certificate<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write key exchange<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write server done<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write server done<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read client key exchange<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read change cipher spec<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS read finished<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write change cipher spec<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (accept): SSLv3/TLS write finished<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: New session callback<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 1 server accept(s) requested<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 1 server accept(s) succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 server renegotiation(s) requested<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 session reuse(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 1 internal session cache item(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 internal session cache fill-up(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 internal session cache miss(es)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 external session cache hit(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 expired session(s) retrieved<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Compression: null, expansion: null<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Setting remote socket options (FD=10)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Option TCP_NODELAY set on remote socket<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=10) initialized<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS alert (read): warning: close notify<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Sent socket write shutdown<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=10) closed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Local descriptor (FD=3) closed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Service [server] finished (0 left)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Found 1 ready file descriptor(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: FD=4 events=0x2001 revents=0x1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: FD=6 events=0x2001 revents=0x0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Dispatching a signal from the signal pipe<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Processing SIGCHLD<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Retrieving pid statuses with waitpid()<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Clients allowed=14648<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: errno: (*__errno_location ())<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Compression disabled<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: No PRNG seeding was required<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: Ciphers: HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: TLS options: 0x02000004 (+0x00000000, -0x00000000)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[ui]: No certificate or private key specified<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Service [inetd client] started<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: s_connect: s_poll_wait 127.0.0.1:4433: waiting 10 seconds<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Setting remote socket options (FD=3)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Option TCP_NODELAY set on remote socket<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=3) initialized<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): before SSL initialization<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write client hello<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write client hello<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server hello<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server certificate<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server key exchange<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read server done<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write client key exchange<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write change cipher spec<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write finished<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS write finished<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read change cipher spec<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS state (connect): SSLv3/TLS read finished<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: New session callback<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Peer certificate was cached (1241 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 1 client connect(s) requested<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 1 client connect(s) succeeded<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 client renegotiation(s) requested<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: 0 session reuse(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Compression: null, expansion: null<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Sending close_notify alert<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: TLS alert (write): warning: close notify<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Remote descriptor (FD=3) closed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Service [inetd client] finished (0 left)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[0]: Deallocating section defaults<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Found 1 ready file descriptor(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: FD=4 events=0x2001 revents=0x1<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: FD=6 events=0x2001 revents=0x0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Dispatching a signal from the signal pipe<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Processing SIGNAL_TERMINATE<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Leak detection table utilization: 86/997, 8.63%<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Removed pid file /opt/stunnel/stunnel-5.48/tests/logs/stunnel.pid<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Courier New"">2018.07.04 09:59:36 LOG7[main]: Deallocating section defaults<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%;border-collapse:collapse">
<tbody>
<tr>
<td nowrap="" valign="top" style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="color:#141B4D">Regards,</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td nowrap="" valign="top" style="padding:0cm 0cm 0cm 0cm">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr>
<td width="60%" nowrap="" valign="top" style="width:60.0%;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif;color:#141B4D">Ian Bamforth</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<br>
Senior Software Engineer <br>
Operations & Planning Systems Division<br>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
T: </span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<a href="tel:00441133443970"><span style="color:gray;text-decoration:none">+44 (0)113 344 3970</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
M: </span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray"><a href="tel:00447852404240"><span style="color:gray;text-decoration:none">+44 (0)7852 404240</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
E: </span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<a href="mailto:Ian.Bamforth@tracsis.com"><span style="color:gray;text-decoration:none">Ian.Bamforth@tracsis.com</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
W:</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<a href="https://www.tracsis.com"><span style="color:gray;text-decoration:none">www.tracsis.com</span></a>
</span><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray"><a href="http://www.tracsisops.com"><span style="color:gray;text-decoration:none">www.tracsisops.com</span></a>
<o:p></o:p></span></p>
</td>
<td nowrap="" valign="top" style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D">Follow Us<br>
</span></b><a href="https://www.linkedin.com/company/972873?trk=tyah&trkInfo=idx:1-1-1,tarId:1420795682492,tas:tracsis"><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;text-decoration:none"><img border="0" width="15" height="15" style="width:.1562in;height:.1562in" id="_x0000_i1025" src="https://static.tracsis.com/email/lin2.png" alt="https://static.tracsis.com/email/lin2.png"></span></b></a><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
</span><a href="https://www.twitter.com/tracsis"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray;text-decoration:none"><img border="0" width="15" height="15" style="width:.1562in;height:.1562in" id="_x0000_i1026" src="https://static.tracsis.com/email/twi2.png" alt="https://static.tracsis.com/email/twi2.png"></span></a><b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#141B4D"><br>
<br>
Tracsis plc</span></b><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:gray">
<br>
Leeds Innovation Centre <br>
103 Clarendon Road <br>
Leeds <br>
LS2 9DF <o:p></o:p></span></p>
</td>
</tr>
<tr>
<td width="600" nowrap="" colspan="2" valign="top" style="width:450.0pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="text-align:justify;line-height:90%;vertical-align:top">
<!--[if gte vml 1]><v:shape id="Picture_x0020_2" o:spid="_x0000_s1026" type="#_x0000_t75" alt="https://static.tracsis.com/email/award4.png" style='position:absolute;left:0;text-align:left;margin-left:510.15pt;margin-top:0;width:221.25pt;height:81pt;z-index:251659264;visibility:visible;mso-wrap-style:square;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:6.65pt;mso-wrap-distance-top:3.35pt;mso-wrap-distance-right:6.65pt;mso-wrap-distance-bottom:3.35pt;mso-position-horizontal:right;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:line;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page' o:allowoverlap="f">
<v:imagedata src="https://static.tracsis.com/email/award4.png" />
<w:wrap type="square"/>
</v:shape><![endif]--><![if !vml]><img width="295" height="108" style="width:3.0729in;height:1.125in" src="https://static.tracsis.com/email/award4.png" align="right" hspace="9" vspace="4" alt="https://static.tracsis.com/email/award4.png" v:shapes="Picture_x0020_2"><![endif]><span style="font-size:7.0pt;line-height:90%;font-family:"Arial",sans-serif;color:gray"><br>
Tracsis Operations and Planning Systems Division is a Division of Tracsis plc and comprises Tracsis plc (05019106), Tracsis Rail Consultancy Limited (05047148), Safety Information Systems Limited trading as COMPASS (02588404) and Tracsis Retail and Operations
Limited (04225250), all subsidiaries of Tracsis plc with a registered office at Leeds Innovation Centre,103 Clarendon Road, Leeds, LS2 9DF. VAT Registration No: 945 7876 61. This email and its attachments may be confidential and are intended solely for the
use of the individual(s) to whom it is addressed. If you are not the intended recipient of this email and its attachments, you must take no action based upon them, nor must you copy or show them to anyone. Please contact the sender if you believe you have
received this email in error.<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>