stunnel-users

stunnel-users@stunnel.org

5 participants
3293 discussions

RE: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 12 Jun '05

12 Jun '05

The PRNG in HP-UX does not start until rc3. The normal place for syslog to start is in rc2, so I had placed stunnel and syslog-ng in rc2 for startup. I simply moved the startup script for PRNG to rc2. -----Original Message----- From: Dan Langille [mailto:dan@langille.org] Sent: Friday, June 10, 2005 10:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: RE: [stunnel-users] stunnel on HP-UX On 10 Jun 2005 at 10:04, Stephen Tanner wrote: > Please disregard, I have located the issue. And it was solved how? -- Dan Langille : http://www.langille.org/ BSDCan - The Technical BSD Conference - http://www.bsdcan.org/

2 1

Stunnel --- communication + encryption in both directions
by Paul Jones 12 Jun '05

12 Jun '05

Hi, I am interested in using Stunnel, but I am a little confused currently. The "Forwarding an insecure port securely from one machine to another" (http://www.stunnel.org/examples/generic_tunnel.html) example only discusses the situation for sending data from the server to the client (i.e. a single direction). How would stunnel have to be set up so that encrypted communication is achieve in both directions? That is, from server to client and also from client to server? Imagine that there is an application running on one end, and an identical app running on the other end and neither supports encryption. So I want to bring stunnel into the picture, so that communication is encrypted/decrypted on both ends. Cheers. Paul _________________________________________________________________ Free wallpapers on Level 9 http://level9.ninemsn.com.au/default.aspx

2 1

configure fails when cross compiling
by Paul Kramer 10 Jun '05

10 Jun '05

Hi Folks, I'm trying to run configure to cross compile, my host machine is linux and my target is mips hardard (mvista) I get the following configure errors: checking for /dev/ptmx and /dev/ptc cannnot check for file existence when cross compiling I poked around in the configure.ac and see there these are defined. What is the purpose for checking for the existence of this files? And... what flags should I be providing to configure? Thanks! Kramer

1 0

RE: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 10 Jun '05

10 Jun '05

Please disregard, I have located the issue. -----Original Message----- From: stunnel-users-bounces(a)mirt.net [mailto:stunnel-users-bounces@mirt.net] On Behalf Of Stephen Tanner Sent: Friday, June 10, 2005 9:50 AM To: stunnel-users(a)mirt.net Subject: RE: [stunnel-users] stunnel on HP-UX This is what I am getting from stunnel when it starts: 2005.06.09 16:14:36 LOG5[1409:1]: stunnel 4.08 on hppa2.0w-hp-hpux11.11 PTHREAD+POLL+IPv4 with OpenSSL 0.9.7e 25 Oct 2004 2005.06.09 16:14:37 LOG4[1409:1]: PRNG may not have been seeded with enough random bytes 2005.06.09 16:14:37 LOG5[1409:1]: 27 clients allowed 2005.06.09 16:14:37 LOG5[1410:2]: 5140 connected from 127.0.0.1:49153 2005.06.09 16:14:37 LOG3[1410:2]: SSL_connect: Peer suddenly disconnected 2005.06.09 16:14:47 LOG5[1410:3]: 5140 connected from 127.0.0.1:49156 2005.06.09 16:14:47 LOG3[1410:3]: SSL_connect: Peer suddenly disconnected If I restart stunnel it establishes the connection fine, and does not receive the PRNG error. What can I do to generate enough random bytes to get this running properly, without starting stunnel later in the boot process? -----Original Message----- From: Stephen Tanner Sent: Tuesday, June 07, 2005 8:36 AM To: 'Jan Meijer' Subject: RE: [stunnel-users] stunnel on HP-UX Negative, the private key is not protected with a passphrase. If I use the startup script to start stunnel and syslog-ng manually, everything works. But on boot stunnel does not seem to properly establish a connection, and I must stop it and restart it to resolve the issue. Stephen -----Original Message----- From: Jan Meijer [mailto:jan.meijer@surfnet.nl] Sent: Tuesday, June 07, 2005 3:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: Re: [stunnel-users] stunnel on HP-UX On Tue, 31 May 2005, Stephen Tanner wrote: > I'm running stunnel on a HP-UX 11.11 system so that I can securely > transfer logs with syslog-ng. I have stunnel and syslog-ng both > starting in rc2.d at S537. Every time I have rebooted the server I get > a broken pipe as if stunnel is having an issue establishing a tunnel, > and I am forced to restart stunnel and syslog-ng. Are there any > specific daemons that need to be running before stunnel starts? I'm > trying to avoid having this start too late, so that I don't miss logs on > some daemons. There are no specific daemons that need to run. Network is practical for DNS resolving if that's needed. To rule out the obvious: you would not have protected your stunnel private key with a passphrase would you? Jan -- http://www.surfnet.nl/organisatie/jame _______________________________________________ stunnel-users mailing list stunnel-users(a)mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users _______________________________________________ stunnel-users mailing list stunnel-users(a)mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users

2 1

RE: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 10 Jun '05

10 Jun '05

This is what I am getting from stunnel when it starts: 2005.06.09 16:14:36 LOG5[1409:1]: stunnel 4.08 on hppa2.0w-hp-hpux11.11 PTHREAD+POLL+IPv4 with OpenSSL 0.9.7e 25 Oct 2004 2005.06.09 16:14:37 LOG4[1409:1]: PRNG may not have been seeded with enough random bytes 2005.06.09 16:14:37 LOG5[1409:1]: 27 clients allowed 2005.06.09 16:14:37 LOG5[1410:2]: 5140 connected from 127.0.0.1:49153 2005.06.09 16:14:37 LOG3[1410:2]: SSL_connect: Peer suddenly disconnected 2005.06.09 16:14:47 LOG5[1410:3]: 5140 connected from 127.0.0.1:49156 2005.06.09 16:14:47 LOG3[1410:3]: SSL_connect: Peer suddenly disconnected If I restart stunnel it establishes the connection fine, and does not receive the PRNG error. What can I do to generate enough random bytes to get this running properly, without starting stunnel later in the boot process? -----Original Message----- From: Stephen Tanner Sent: Tuesday, June 07, 2005 8:36 AM To: 'Jan Meijer' Subject: RE: [stunnel-users] stunnel on HP-UX Negative, the private key is not protected with a passphrase. If I use the startup script to start stunnel and syslog-ng manually, everything works. But on boot stunnel does not seem to properly establish a connection, and I must stop it and restart it to resolve the issue. Stephen -----Original Message----- From: Jan Meijer [mailto:jan.meijer@surfnet.nl] Sent: Tuesday, June 07, 2005 3:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: Re: [stunnel-users] stunnel on HP-UX On Tue, 31 May 2005, Stephen Tanner wrote: > I'm running stunnel on a HP-UX 11.11 system so that I can securely > transfer logs with syslog-ng. I have stunnel and syslog-ng both > starting in rc2.d at S537. Every time I have rebooted the server I get > a broken pipe as if stunnel is having an issue establishing a tunnel, > and I am forced to restart stunnel and syslog-ng. Are there any > specific daemons that need to be running before stunnel starts? I'm > trying to avoid having this start too late, so that I don't miss logs on > some daemons. There are no specific daemons that need to run. Network is practical for DNS resolving if that's needed. To rule out the obvious: you would not have protected your stunnel private key with a passphrase would you? Jan -- http://www.surfnet.nl/organisatie/jame _______________________________________________ stunnel-users mailing list stunnel-users(a)mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users

1 0

Compression (zlib) does not work under windows
by Ben 09 Jun '05

09 Jun '05

Hello, Enabling zlib compression in stunnel (versions 4.06 - 4.10) does not work under windows. I have tried a combination of the following, all of which have failed in either two ways. The first way being disconnection with the following messages in the stunnel console: 2005.06.09 11:43:10 LOG7[4072:3088]: SSL alert (write): fatal: decompression failure 2005.06.09 11:43:10 LOG3[4072:3088]: SSL_read: 1408F06B: error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression Or stunnel crashes all together. Here are the following combinations I've used with stunnel and openssl. stunnel 4.06 w/ all zlib binary openssl libraries stunnel 4.07 w/ all zlib binary enabled openssl libraries stunnel 4.08 w/ all zlib binary enabled openssl libraries stunnel 4.09 w/ all zlib enabled openssl libraries stunnel 4.10 w/ all zlib enabled openssl libraries stunnel 4.06 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.07 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.08 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.09 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ stunnel 4.10 w/ custom compiled openssl 0.9.7g w/ zlib library under vc++ Under linux, using stunnel as a client, compression works correctly. On the server I have tried stunnel versions: stunnel 4.06 w/ zlib openssl 0.9.7g and openssl 0.9.7f stunnel 4.09 w/ zlib openssl 0.9.7g and openssl 0.9.7f stunnel 4.10 w/ zlib openssl 0.9.7g and openssl 0.9.7f Any help would be appreciated. We offer stunnel connections as a service to our clients to reduce the overhead of NNTP traffic and we would very much like to get compression working. Thanks for your time, Ben

1 0

RE: Re-Installing Stunnel
by mhrtmhd94＠att.net 08 Jun '05

08 Jun '05

On 2005-06-07, at 23:45:35, Michal.Trojnara(a)mirt.net wrote: > On 2005-06-06, at 22:56, mhrtmhd94(a)att.net wrote: > > The only way I could do this was to delete all of the programs in the > > Stunnel directory > > You should stop and uninstall stunnel service first. 8-) > AFAIK it's also possible to remove a service from Control > Panel/Services. > > Best regards, > Mike > There doesn't appear to be any Services option under Control Panel on my system (WinXp Home SP2) Thanks. Mort

2 1

Reinstalling Stunnel
by mhrtmhd94＠att.net 07 Jun '05

07 Jun '05

I followed the Agent/Stunnel instructions on WURD. I reached the point where I added a space, followed by -install to the shortcut target path. When I attempted to execute this, a message appeared: "Failed to create a new service." I want to thank all those who answered my previous request. I am hoping that someone with experience using Stunnel in conjunction with Agent might be able to help me. I can't for the life of me figure out what I did differently from the first time I installed Stunnel to run with Agent. One person who replied to my previous request asked if I had uninstalled the previous installation of Stunnel. The only way I could do this was to delete all of the programs in the Stunnel directory, because Stunnel does not appear on the list of programs under Add and Delete Programs via Control Panel. Note: I originally was using version 4.07. I am now attempting to use version 4.10. Could this be the problem? Thanks in advance to anyone who can help.

2 1

FW: [stunnel-users] stunnel on HP-UX
by Stephen Tanner 07 Jun '05

07 Jun '05

I forgot to make sure this went to the list. -----Original Message----- From: Stephen Tanner Sent: Tuesday, June 07, 2005 8:36 AM To: 'Jan Meijer' Subject: RE: [stunnel-users] stunnel on HP-UX Negative, the private key is not protected with a passphrase. If I use the startup script to start stunnel and syslog-ng manually, everything works. But on boot stunnel does not seem to properly establish a connection, and I must stop it and restart it to resolve the issue. Stephen -----Original Message----- From: Jan Meijer [mailto:jan.meijer@surfnet.nl] Sent: Tuesday, June 07, 2005 3:08 AM To: Stephen Tanner Cc: stunnel-users(a)mirt.net Subject: Re: [stunnel-users] stunnel on HP-UX On Tue, 31 May 2005, Stephen Tanner wrote: > I'm running stunnel on a HP-UX 11.11 system so that I can securely > transfer logs with syslog-ng. I have stunnel and syslog-ng both > starting in rc2.d at S537. Every time I have rebooted the server I get > a broken pipe as if stunnel is having an issue establishing a tunnel, > and I am forced to restart stunnel and syslog-ng. Are there any > specific daemons that need to be running before stunnel starts? I'm > trying to avoid having this start too late, so that I don't miss logs on > some daemons. There are no specific daemons that need to run. Network is practical for DNS resolving if that's needed. To rule out the obvious: you would not have protected your stunnel private key with a passphrase would you? Jan -- http://www.surfnet.nl/organisatie/jame

1 0

stunnel on HP-UX
by Stephen Tanner 07 Jun '05

07 Jun '05

I'm running stunnel on a HP-UX 11.11 system so that I can securely transfer logs with syslog-ng. I have stunnel and syslog-ng both starting in rc2.d at S537. Every time I have rebooted the server I get a broken pipe as if stunnel is having an issue establishing a tunnel, and I am forced to restart stunnel and syslog-ng. Are there any specific daemons that need to be running before stunnel starts? I'm trying to avoid having this start too late, so that I don't miss logs on some daemons. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Stephen Tanner HP-UX Systems Administrator Network Support Services Lee County Clerk of Courts =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

2 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users