Hi
I am running stunnel on my local pc win10.
Trying to stunnel to
https://api.interactsms.com/HTTP_API/V1/sendmessage.aspx?user=User1&passwor…
Password1&api_id=9876&to=353879999999&text=HelloWorld&from=YourCompany
which gives me wrong user name and password which is fine.
if I Stunnel this
http://localhost:8083/HTTP_API/V1/sendmessage.aspx?user=User1&password=Pass…
I get
Misdirected Request
The client needs a new connection for this request as the requested host name does not match the Server Name Indication (SNI) in use for this connection.
Is this a problem with the site or my Stunnel config?
when I installed Stunnel, I used localhost for the CN.
I have tried downloading the client, intermediate and CA cert with the below config...
;cert = D:\Program Files (x86)\stunnel\config\sms\interactsms-com.pem
;CAfile= D:\Program Files (x86)\stunnel\config\sms\godaddyca.pem
this is current config...
[sms]
client = yes
accept = 8083
connect = api.interactsms.com:443
cert = D:\Program Files (x86)\stunnel\config\stunnel.pem
Hi, this is my first post on this mailing list.
I did extensive search and tried to resolve the issue I have in pfsense with stunnel. Pfsense CE 2.7.2 uses stunnel 5.71. In my config I created certificate using the acme package with Let's ecrypt. The created certificate works fine in pfsense wenb consol and also with stunnel 5.68 on Debian, but it does not work with stunnel 5.71 on Pfsense. All connections going through stunnel get are timing out and the stunnel log has the following in it:
```
Jul 19 00:53:08 router1 stunnel[2933]: LOG5[6]: Service [XXXX] accepted connection from xxxxxx:46415
Jul 19 00:53:08 router1 stunnel[2933]: LOG6[6]: Peer certificate not required
Jul 19 00:53:08 router1 stunnel[2933]: LOG6[6]: OCSP: The root CA certificate was not found
Jul 19 00:53:08 router1 stunnel[2933]: LOG5[6]: OCSP: Connecting the AIA responder "http://r10.o.lencr.org"
Jul 19 00:56:05 router1 stunnel[2933]: LOG3[6]: Error resolving "r10.o.lencr.org": Address family for nodename not supported (EAI_ADDRFAMILY)
Jul 19 00:56:05 router1 stunnel[2933]: LOG3[6]: OCSP: Failed to resolve the OCSP responder address
Jul 19 00:56:05 router1 stunnel[2933]: LOG6[6]: OCSP: No OCSP stapling response to send
Jul 19 00:56:05 router1 stunnel[2933]: LOG3[6]: SSL_accept: /var/jenkins/workspace/pfSense-CE-snapshots-2_7_2-main/sources/FreeBSD-src-RELENG_2_7_2/crypto/openssl/ssl/record/rec_layer_s3.c:304: error:0A000126:SSL routines::unexpected eof while reading
Jul 19 00:56:05 router1 stunnel[2933]: LOG5[6]: Connection reset/closed: 0 byte(s) sent to TLS, 0 byte(s) sent to socket
```
So far i tried:
1. Creating new certificate with acme
2. Unisntall and reinstall both acme and stunnel
3. Tried new cetrificate provider (zerossl)
4. tried adding "OCSPrequire = no" to stunnel.conf based on https://www.stunnel.org/mailman3/hyperkitty/list/stunnel-users@stunnel.org/…
None of the above fixed the issue and not I am not sure how to resolve it. I have another Pfsense installation where all these things work fine. I compaired the stunnel.conf files, but there are identical (except the certificate ofcourse).
I looked into the source code and found that the error message is comming from ocsp_params_append_root_ca function in opcs.c, but I ma not a C programer and neither familiar with the stunnel code to figure out more.
I hope someone from the stunnel list has some ideas how to proceed based on the logs above.
Thank you!
