September 2007 - stunnel-users

Problem with stunnel 4.20 on Fedora 7
by Andrew M Dunn 30 Nov '07

30 Nov '07

[Oh wise list folks... I haven't seen any responses to this. Does anybody have any experience either with using stunnel on Fedora 7, or with the particular error? I cannot find any other hints or reasons as to why the resolution is failing... Andy] ----original message------ I can't get stunnel to run on a freshly-installed Fedora 7 system. It fails with "Error resolving '0.0.0.0': servname is not supported for ai_socktype" but the usual other causes of that error (ie. ports not defined in /etc/services, bad settings in /etc/nsswitch.conf) are not the culprit this time. COMMAND LINE: /usr/sbin/stunnel /home/amdunn/security/stunnel.conf COMMAND OUTPUT: 2007.08.29 11:44:12 LOG3[13614:3086243520]: Error resolving '0.0.0.0': servname is not supported for ai_socktype (EAI_SERVICE) file /home/amdunn/security/stunnel.conf line 10: Failed to resolve accepting address STUNNEL.CONF FILE: ; ; stunnel file for testing 443 access to local http server ; cert=/home/amdunn/security/xxxxxxx key=/home/amdunn/security/yyyyyyy foreground=yes ; ; [sweb] accept=443 ; https port connect=80 ; standard httpd listening port TIMEOUTclose=0 ; must set this or IE waits 60sec on page end client=no STUNNEL -VERSION OUTPUT: stunnel 4.20 on i686-redhat-linux-gnu with OpenSSL 0.9.8b 04 May 2006 Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP Global options debug = 5 pid = /var/run/stunnel.pid RNDbytes = 64 RNDfile = /dev/urandom RNDoverwrite = yes Service-level options cert = /etc/stunnel/stunnel.pem ciphers = ALL:!ADH:+RC4:@STRENGTH key = /etc/stunnel/stunnel.pem session = 300 seconds sslVersion = SSLv3 for client, all for server TIMEOUTbusy = 300 seconds TIMEOUTclose = 60 seconds TIMEOUTconnect = 10 seconds TIMEOUTidle = 43200 seconds verify = none

2 1

Re: [stunnel-users] Stunnel Testing
by Luis Rodrigo Gallardo Cruz 30 Sep '07

30 Sep '07

On Sat, Sep 29, 2007 at 05:23:29PM -0500, Robert Lambrecht wrote: > I am using a command line mailer (BLAT) from a batch file to notify me when > errors occur. My ISP requires SSL however still allows non-SSL traffic on > Port 25 as well. > > I then use Stunnel with the following config: > > [smtps] > accept = 25 > connect = smtp.isp.domain.net:465 > > Port 465 is the SSL port for my ISP. > > I run Stunnel as a service in Vista. > > I then have BLAT send an SMTP message on Port 25 to my ISP. This works. stunnel is listening on port 25 *of your machine*, not your isp's. Thus, you need to have BLAT send it to localhost, port 25. Better yet, to avoid confussion, have stunnel listen on some other port (456 would be a good choice), and have BLAT send to localhost, on that port. To check you're not sending anything on the clear, install a network sniffer (wireshark is good) and have it show your network trafic to your.isp.com. If you can read the mail in the displayed traffic, you're sending in cleartext ;-)

1 0

Stunnel Testing
by Robert Lambrecht 30 Sep '07

30 Sep '07

I am using a command line mailer (BLAT) from a batch file to notify me when errors occur. My ISP requires SSL however still allows non-SSL traffic on Port 25 as well. Here is my scenario: I use BLAT to send an SMTP message on Port 25 to my ISP. This works but I must send my userid and password which I don't want to do. I then use Stunnel with the following config: [smtps] accept = 25 connect = smtp.isp.domain.net:465 Port 465 is the SSL port for my ISP. I run Stunnel as a service in Vista. I then have BLAT send an SMTP message on Port 25 to my ISP. This works. My question is, everything seems to work but how can I test this? I'm trying to figure out if it really worked (I sent the message with SSL to port 465) or I am still just sending a message on Port 25. Since both of these cases work, it is hard for me to tell. I've tried to telnet to these ports; however, since I basically have to specify port 25 in either case for the test, I'm not sure that I am successful. Any thoughts on how to make sure my messages are going through SSL? Bob

1 0

stunnel-users Digest, Vol 38, Issue 14
by Menon, Sreejith Mohan 28 Sep '07

28 Sep '07

Hi, What you have understood is correct. We are the provider of the Web Service; and my requirement is something as explained below, The end users are using a Web site and the data entered in the web site will be converted to an XML file and send to the Web Service which we have provided. The end users are using STUNNEL to encrypt the XML files before sending to us. Hence, I need to decrypt the message and process it. Hence, I think I need to use STUNNEL for doing the same. Also, upon request from the end users I need to send some data, again it is XML files; and I need to encrypt this using STUNNEL and send it to the end user. I am new to STUNNEL and went through the examples provided in www.stunnel.org and didn't get a very good idea on how to get this done. I hope, I am able to make it clear this time. I was communicating through another email id till now (sreejithmohanm(a)gmail.com) For our future communication, I will be using the present email id. Sorry for the inconvenience. Thanks and best regards, Sreejith Mohan Menon Software Engineer Globalization Services SAP Labs India Pvt. Ltd. 4th Floor 1B, RMZ NXT, Sonnenhalli, K.R. Puram Hobli, East Taluk, Bangalore - 560 066. P - +91 80 4013 4987 M - +91 98863 08088 mailto:sreejith.mohan.menon@sap.com

1 0

Using Stunnel
by sreejith 28 Sep '07

28 Sep '07

Dear friends, I have a requirement where in I have a web service that uses STUNNEL for encrypting and decrypting XML messages. Please help me out with how to proceed ? What needs to be done ? How the configuration file should be ? Thanks and best regards, Sreejith

2 1

Stunnel Dies at 3500 connections...
by bear＠bears.org 28 Sep '07

28 Sep '07

Hey! I'm having a problem with a stunnel setup I have, and was wondering if anyone could help? I have two machines, one is acting as a simulator of clients. It uses the MINA library from apache to simulate a bunch of clients of the server. And the other acting as a server. Without stunnel in place, the client and server chat with no trouble... even with as many as 10k simulated clients. The protocol they communicate is just compressed binary data over standard TCP/IP. 20-50 bytes each direction per exchange. The behavior changes once stunnel is in place. The server behaves just fine, but the client acts very strange... in ways that make me think that stunnel is hitting some OS limit. (The files ulimit is set waaaaaay higher than the number of clients) On starting the client application, it begins making connections through the stunnel tunnel. The first 1500 or so are fine, but after that the load on the machine begins to climb. It gets to 5 or so around 2000. If I only do 2000 clients, the load then drops down into the 0.5 range, and the system runs okay. However, if I set the number of simulated clients higher... say 4000, the load continues to climb. When it gets to 3500 or so, the load goes above 500. The machine becomes unusable, and after a bit, stunnel dies with the message KILLED. I tried changing how quickly the clients connect, but that seemed to make no difference. Also, running two stunnels for the clients, and sending 2000 to each, for instance, causes it to still break down around 3500 or so. (Which is why I think it is an os limit) Any suggestions on this? Thanks! Peace, Gary version Stunnel 4.20 startup info 2007.09.24 12:09:50 LOG7[26537:3086939840]: RAND_status claims sufficient entropy for the PRNG 2007.09.24 12:09:50 LOG7[26537:3086939840]: PRNG seeded successfully 2007.09.24 12:09:50 LOG4[26537:3086939840]: Wrong permissions on hcs-key-and-cert-1024.pem 2007.09.24 12:09:50 LOG7[26537:3086939840]: Certificate: hcs-key-and-cert-1024.pem 2007.09.24 12:09:50 LOG7[26537:3086939840]: Certificate loaded 2007.09.24 12:09:50 LOG7[26537:3086939840]: Key file: hcs-key-and-cert-1024.pem 2007.09.24 12:09:50 LOG7[26537:3086939840]: Private key loaded 2007.09.24 12:09:50 LOG7[26537:3086939840]: SSL context initialized for service hcsuno 2007.09.24 12:09:50 LOG5[26537:3086939840]: stunnel 4.20 on i686-pc-linux-gnu with OpenSSL 0.9.8d 28 Sep 2006 2007.09.24 12:09:50 LOG5[26537:3086939840]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv4 Auth:LIBWRAP 2007.09.24 12:09:50 LOG6[26537:3086939840]: file ulimit = 80000 (can be changed with 'ulimit -n') 2007.09.24 12:09:50 LOG6[26537:3086939840]: poll() used - no FD_SETSIZE limit for file descriptors 2007.09.24 12:09:50 LOG5[26537:3086939840]: 39062 clients allowed 2007.09.24 12:09:50 LOG7[26537:3086939840]: FD 3 in non-blocking mode 2007.09.24 12:09:50 LOG7[26537:3086939840]: FD 4 in non-blocking mode 2007.09.24 12:09:50 LOG7[26537:3086939840]: FD 5 in non-blocking mode 2007.09.24 12:09:50 LOG7[26537:3086939840]: SO_REUSEADDR option set on accept socket 2007.09.24 12:09:50 LOG7[26537:3086939840]: hcsuno bound to 0.0.0.0:4090 2007.09.24 12:09:50 LOG7[26537:3086939840]: Created pid file /tmp/stunnel1.pid uname -a Linux testbed-client1 2.6.9-42.ELsmp #1 SMP Sat Aug 12 09:39:11 CDT 2006 i686 i686 i386 GNU/Linux libc 2.3.4 stunnel -version stunnel 4.20 on i686-pc-linux-gnu with OpenSSL 0.9.8d 28 Sep 2006 Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv4 Auth:LIBWRAP Global options debug = 5 pid = /usr/local/var/run/stunnel/stunnel.pid RNDbytes = 64 RNDfile = /dev/urandom RNDoverwrite = yes Service-level options cert = /usr/local/etc/stunnel/stunnel.pem ciphers = ALL:!ADH:+RC4:@STRENGTH key = /usr/local/etc/stunnel/stunnel.pem session = 300 seconds sslVersion = SSLv3 for client, all for server TIMEOUTbusy = 300 seconds TIMEOUTclose = 60 seconds TIMEOUTconnect = 10 seconds TIMEOUTidle = 43200 seconds verify = none gcc -v Reading specs from /usr/lib/gcc/i386-redhat-linux/3.4.6/specs Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --enable-shared --enable-threads=posix --disable-checking --with-system-zlib --enable-__cxa_atexit --disable-libunwind-exceptions --enable-java-awt=gtk --host=i386-redhat-linux Thread model: posix gcc version 3.4.6 20060404 (Red Hat 3.4.6-3) openssl version OpenSSL 0.9.7a Feb 19 2003 In the config, I have: client=yes debug=debug socket = l:TCP_NODELAY=1 pid = /tmp/stunnel1.pid foreground=yes [hcsuno] accept=4090 connect = testbed-hcs1:4094 cert = hcs-key-and-cert-1024.pem key = hcs-key-and-cert-1024.pem ********* ***** ** Gary Coulbourne *************************.* Bear Activist ****** *********** ** *******o ******* ********* **** ****`- Systems Administrator ******* ********* ***** http://www.bears.org ****** ********** **** bear(a)bears.org ## ***** ***** ## **** KB3INA ### ***** ### **** Animal Conservation/Preservation #,,, ***,,, ##,,, **,,,

2 4

Setting up Stunnel with Gmail.
by Roger 24 Sep '07

24 Sep '07

Hi, A simple question from a technical learner! I use Gmail's POP3 & SMTP [SSL] servers for three Gmail accounts using Thunderbird as my email client. I would like to know EXACTLY how to set up stunnel so that my anti-virus program ( NOD32) can scan messages being sent and received by SSL on ports 995 & 465. I have Open SSL installed: downloaded but not yet installed stunnel set up. I have tried before to use stunnel, but failed as I keep getting message, as I recall, to the effect that localhost is not recognised. There are detailed explanations on the web for configuring with Spampal, but I don't have, or need Spampal! Thanks, Roger

2 1

Re: [stunnel-users] Relaying OOB data [Was: A series of minor patchesfrom Debian]
by Richard's Hotmail 24 Sep '07

24 Sep '07

Hi Luis, Thanks for the detailed reply! > Ok, been reading. The short answer is no. Oh well :-( I guess that's what IPsec's for. > The longer answer is SSL doesn't support OOB data, so that's why > not. I did read your post saying you've read specs where it says it > does, but I could find no such. Take a look at RFC4346, section 6.2 > http://tools.ietf.org/html/rfc4346#page-14 > Take a look also at this thread: > http://www1.ietf.org/mail-archive/web/tls/current/msg01041.html Doesn't that thread suggest that OOB functionality is part of the SSLv3 standard? Is version three one of those "yet to be" standards that is still a long way off? Renamed TLS? (I found several RFCs dealing with this, anyone know which is the relevant one? I couldn't find "Urgent", "OOB" or "band" in 4346) My understanding (imagination maybe) is that the OOB character is to be packaged up as a single byte record surrounded with the SSL wrapper with a bit set that says it's the OOB character. I would now like stunnel just to dequeue it from SSL and then set the MSG_OOB flag and replay it to the application port. So it's sort of quasi-OOB to Stunnel and then true-OOB to the receiving port. > The argument (almost) in full: > - SSL doesn't define anything like OOB data in its streams, so > anything we did in stunnel would be an extension, and not > interoperable. And, anyways, would have to be done in openssl and not > in stunnel, I think. I must be confused about what's available (the only SSL code I've cut is simple Java client stuff) 'cos I'm sure I've seen patch-comments that say something like "make sure stunnel handles OOB data correctly" and isn't there some sort of OOB INLINE configuration parameter. Is there really northing available after the SSL_Read that identifies the data as an OOB character? Anyway, thanks again for the reply. Cheers Richard Maher PS. Does anyone out there know of a lower-level version of Stunnel (or something else) that spoofs the originating host-address when replaying the connection on the local server? It sure would be useful for client identification, and for reducing DoS attacks! ----- Original Message ----- From: "Luis Rodrigo Gallardo Cruz" <rodrigo(a)nul-unu.com> To: <stunnel-users(a)mirt.net> Sent: Tuesday, September 18, 2007 9:14 AM Subject: [stunnel-users] Relaying OOB data [Was: A series of minor patchesfrom Debian] > _______________________________________________ > stunnel-users mailing list > stunnel-users(a)mirt.net > http://stunnel.mirt.net/mailman/listinfo/stunnel-users

1 0

A series of minor patches from Debian
by Luis Rodrigo Gallardo Cruz 24 Sep '07

24 Sep '07

Hello. I have recently become the maintainer for the Debian package of stunnel. During the adoption process I noticed a few things that I think would be good to fix in the code. I will be sending the patches to this list (unless a better place for this is pointed out) as separate mails, to allow them to have individual responses, but thought I'd better introduce myself first. Thank you all, -- Rodrigo Gallardo GPG-Fingerprint: 7C81 E60C 442E 8FBC D975 2F49 0199 8318 ADC9 BC28

4 14

[patch] FSF postal address is outdated
by Luis Rodrigo Gallardo Cruz 15 Sep '07

15 Sep '07

The following long but rather trivial patch fixes up the FSF's postal address in the licencing statements for source files. This is a minor change, mostly for the benefit of tying up loose ends. ---------------------------------------------------------------------- diff --git a/src/client.c b/src/client.c index 6b3c5a4..a578b81 100644 --- a/src/client.c +++ b/src/client.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/common.h b/src/common.h index c666086..f96a537 100644 --- a/src/common.h +++ b/src/common.h @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. */ #ifndef COMMON_H diff --git a/src/ctx.c b/src/ctx.c index 90dbdbc..dd4e01b 100644 --- a/src/ctx.c +++ b/src/ctx.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/env.c b/src/env.c index c195950..cbf105d 100644 --- a/src/env.c +++ b/src/env.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/file.c b/src/file.c index 5075b77..e00a82b 100644 --- a/src/file.c +++ b/src/file.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/gui.c b/src/gui.c index df1d6a8..d820b15 100644 --- a/src/gui.c +++ b/src/gui.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/log.c b/src/log.c index 0e3f927..45186b2 100644 --- a/src/log.c +++ b/src/log.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/network.c b/src/network.c index 98b1f5a..dfb76fa 100644 --- a/src/network.c +++ b/src/network.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/nogui.c b/src/nogui.c index deeca5b..a02cea7 100644 --- a/src/nogui.c +++ b/src/nogui.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/options.c b/src/options.c index bad281b..25a6e81 100644 --- a/src/options.c +++ b/src/options.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/protocol.c b/src/protocol.c index f579138..218450c 100644 --- a/src/protocol.c +++ b/src/protocol.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/prototypes.h b/src/prototypes.h index 004a576..50b2aec 100644 --- a/src/prototypes.h +++ b/src/prototypes.h @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. */ #ifndef PROTOTYPES_H diff --git a/src/pty.c b/src/pty.c index d44a624..645492b 100644 --- a/src/pty.c +++ b/src/pty.c @@ -17,7 +17,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/resolver.c b/src/resolver.c index 6180113..84133cc 100644 --- a/src/resolver.c +++ b/src/resolver.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/ssl.c b/src/ssl.c index 84c79ee..7797747 100644 --- a/src/ssl.c +++ b/src/ssl.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/sthreads.c b/src/sthreads.c index de8388a..7588f61 100644 --- a/src/sthreads.c +++ b/src/sthreads.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/stunnel.c b/src/stunnel.c index bdb5dd3..3312cca 100644 --- a/src/stunnel.c +++ b/src/stunnel.c @@ -20,7 +20,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL diff --git a/src/verify.c b/src/verify.c index 72fcdb2..88b010b 100644 --- a/src/verify.c +++ b/src/verify.c @@ -15,7 +15,7 @@ * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software - * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. + * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. * * In addition, as a special exception, Michal Trojnara gives * permission to link the code of this program with the OpenSSL ---------------------------------------------------------------------- -- Rodrigo Gallardo GPG-Fingerprint: 7C81 E60C 442E 8FBC D975 2F49 0199 8318 ADC9 BC28

1 0