stunnel-users January 2005

stunnel-users@stunnel.org

28 participants
26 discussions

Error:1408F10B, Wrong Version Number
by Emily Mattes 09 Jan '05

09 Jan '05

I'm trying to set up STunnel 4.07 client-side for Qm (http://pyric.org/qm/) on Windows XP Pro, but when I try to send a message Qm times out and I get this error in the STunnel log: SSL_connect: 1408F10B: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number Here's my config file: client = yes delay = yes [pop3] accept = 110 connect = pop.gmail.com:995 [smtp] accept = 25 connect = smtp.gmail.com:587 This is my first time trying to configure SSL for anything, so I really don't know what's going wrong. Any help would be greatly appreciated. Thank you very much! -- Emily -- schroedinger(a)gmail.com

1 0

Newbie trying to connect over a Microsoft Proxy
by Michael Blake 05 Jan '05

05 Jan '05

Hi All I'm a relative newbie to Stunnel, and am trying to set up a tunnel so I can Remote Desktop from work to my PC/server at home. I'm using versions 4.05 & 4.06 of the Windows binaries. A Microsoft Proxy Server v2.0 is used at work, and it proxies HTTP, Secure (is that SSL/port 443??), FTP and Gopher over port 800. I'm not sure if it proxies Socks, as there's no entry for it in Internet Explorer. I've tested the configuration and it works on my LAN, and it works from home when I enter my domain home (so my firewall is set up correctly). My config is as follows: #Client CAfile = stunnel.pem cert = stunnel.pem client = yes verify = 3 [rdp-80] accept = localhost:3390 connect = xxx.xxx.xxx.xxx:80 #Server CAfile = stunnel.pem cert = stunnel.pem client = yes verify = 3 [rdp-80] accept = 192.168.10.221:80 connect = 127.0.0.1:3389 Is there something I need to do to traverse this proxy? Any help would be greatly appreciated! Tks, Michael Blake IT Consultant | Headbyte Limited Tel: + 44 7909 844273 http://www.headbyte.co.uk

2 2

stunnel-4.07 on non-IPv6 systems
by Hans Werner Strube 04 Jan '05

04 Jan '05

On systems which do not yet support IPv6 and do not have getnameinfo (for instance, Solaris 7), also NI_NUMERICHOST and NI_NUMERICSERV are usually undefined. In stunnel-4.07, this causes compilation of src/network.c to fail. Patch: *** src/network.c.ORI Mon Jan 3 00:20:27 2005 --- src/network.c Tue Jan 4 14:46:10 2005 *************** *** 73,78 **** --- 73,84 ---- static const char *s_gai_strerror(int); #ifndef HAVE_GETNAMEINFO + #ifndef NI_NUMERICHOST + #define NI_NUMERICHOST 2 + #endif + #ifndef NI_NUMERICSERV + #define NI_NUMERICSERV 8 + #endif static int getnameinfo(const struct sockaddr *, socklen_t, char *, int , char *, int , int ); #endif

1 0

bugfix for the makefile of stunnel 4.07
by deepstar＠ulyssis.org 04 Jan '05

04 Jan '05

Hi, there appears to be a bug in the makefile (tools/Makefile) that installed files/directories in the wrong place when installing to another root directory (DESTDIR env var) The attached patch should fix it. greets, -- Steven Van Acker

1 0

Port forwarding based on application type
by Konda Ankireddyapalli 03 Jan '05

03 Jan '05

Hello all, Can stunnel forward the traffic to different ports based on an application type as opposed to by port? If yes, how can it be configured? My need is that on the client side we have many applications that share a single outgoing port. On the server side I want to demultiplex the stunnel traffic coming in on a single port to multiple applications after decryption. Thanks in advance, Konda

1 0

Stunnel 4.07 released
by Michal Trojnara 02 Jan '05

02 Jan '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 New release fixes several bugs introduced in version 4.06. ChangeLog entry: Version 4.07, 2005.01.03, urgency: MEDIUM: * Bugfixes - Problem with infinite poll() timeout negative, but not equal to -1 fixed. - Problem with a file descriptor ready to be read just after a non-blocking connect call fixed. - Compile error with EAI_NODATA not defined or equal to EAI_NONAME fixed. - IP address and TCP port textual representation length (IPLEN) increased to 128 bytes. - OpenSSL engine support is only used if engine.h header file exists. - Broken NT Service mode on WIN32 platform fixed. - Support for IPv4-only WIN32 machines restored. Homepage: http://stunnel.mirt.net/ Best regards, Mike -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFB2IcR/NU+nXTHMtERAn/hAJ42XjEtUrkyixamOeMV0rRGCvqwDACg21LB sYFF8L4teETWdrkLjfkdX2E= =qOfD -----END PGP SIGNATURE-----

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users January 2005