Stunnel v5.03 is the most recent version we're using, although with earlier OpenSSL versions in place.

With that in mind, I compiled stunnel v5.03 with same OpenSSL 1.0.1.513 and iFix IV71446m9a applied as with the v5.17 attempt. I'm able to create sessions with no problem. The internal error/bad magic does not occur.



On Thu, May 7, 2015 at 2:12 AM, Michal Trojnara <Michal.Trojnara@mirt.net> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06.05.2015 18:14, Eckert, Doug wrote:
> I've gotten v5.17 compiled on AIX 5.3 & 6.1 with the following
>
> xlccmp.13.1.0             13.1.0.3  COMMITTED  XL C compiler
> openssl.base             1.0.1.513  COMMITTED  Open Secure Socket
> Layer IV71446m9a             Ifix for Openssl CVE
>
> Everything seems to have compiled fine. I packaged it up,
> installed, and set up a quick config. The server side aborts on me.
> Debug output follows. Need some direction on where to look next.
> Thanks in advance!
[cut]
> 2015.05.06 12:08:03 LOG5[ui]: stunnel 5.17 on
> powerpc-ibm-aix5.3.0.0 platform 2015.05.06 12:08:03 LOG5[ui]:
> Compiled/running with OpenSSL 1.0.1e 11 Feb 2013
[cut]
> INTERNAL ERROR: Bad magic at tls.c, line 182

There seems to be a bug in your OpenSSL.  OPENSSL_free() function was
invoked on a memory block that was *not* allocated with
OPENSSL_malloc(), or it was already released (double free).

You may try to compile your OpenSSL from source.

Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=aSTh
-----END PGP SIGNATURE-----
_______________________________________________
stunnel-users mailing list
stunnel-users@stunnel.org
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users



--

Doug Eckert
Technical Architect

Global Business Technology
Dow Jones | A News Corporation Company
P.O. Box 300 | Princeton NJ 08543-0300

(W) 609.520.4993 (C) 732.666.3681
Email: doug.eckert@dowjones.com