Also, when the parent process is killed with stop, I see Sep 17 14:34:16 server stunnel: warning: can't get client address: Bad file descriptor because the child processes seem to stick around.
I've modified the init script to kill the main process using the pid file and then using pidof to identify and kill the remaining child processes. Is this expected behavior?
What about: ftp://stunnel.mirt.net/stunnel/libwrap_shutdown.patch Does it help?
On 4.25, it patched with offset of 1 line:
patching file src/libwrap.c Hunk #1 succeeded at 81 with fuzz 1 (offset -1 lines).
But otherwise the patch does seem to have the desired effect. Looks good to me. I'm using the stock init script with this patch and the daemon change previously mentioned.
Regards, KAM