I have a game client connecting to a server using TCP over SSL.

I'm trying to setup an SSL proxy using 2 stunnels on the same server like so:

Client --> Stunnel-Server:20001 (decrypt)--> Stunnel-Client:901  (encrypt)---> Server:20001

Using latest stunnel-4.21-r1 on Gentoo kernel 2.6.22-gentoo-r9

I have a weird problem.

The first connection after starting both stunnels works fine.

Afterwards every time the client tries to connect, it gets refused once. Then it tries again and gets connected.

Then the next time it will once again get refused once and then connect.

I have looked at the logs and it seems the Stunnel server (the first) gets Connection Refused from localhost:901.

Then it tries again and gets connected.

The Stunnel client (the second) doesn't even mention the first failing local connection in the log.

I have provided the config files of both stunnels and a log with debug = 7 (server ip's are censored)

I have also tried the following config tweaks with no luck