Hi,

I'm using stunnel to communicate with FIX server.
In order to do that, I disabled SSLv2 and SSLv3 and set the sslVersion to TLSv1.

It seems like stunnel keeps trying using SSLv3 handshake, which isn't working.

This is the configuration:
client = yes
debug = 7
output=stunnel.log
cert = stunnel.pem

; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

; Turning for LMAX
options = NO_SSLv2
options = NO_SSLv3

[LMAX-fix-tunnel-DEMO-Trading]
sslVersion = TLSv1
accept = 40001

stunnel log:
2015.02.04 12:10:31 LOG7[12516]: Service [LMAX-fix-tunnel-DEMO-MktData] started
2015.02.04 12:10:31 LOG5[12516]: Service [LMAX-fix-tunnel-DEMO-MktData] accepted connection from 127.0.0.1:59475
2015.02.04 12:10:31 LOG6[12516]: s_connect: connecting 91.215.165.69:443
2015.02.04 12:10:31 LOG7[12516]: s_connect: s_poll_wait 91.215.165.69:443: waiting 10 seconds
2015.02.04 12:10:31 LOG5[12516]: s_connect: connected 91.215.165.69:443
2015.02.04 12:10:31 LOG5[12516]: Service [LMAX-fix-tunnel-DEMO-MktData] connected remote server from 10.0.0.62:59476
2015.02.04 12:10:31 LOG7[12516]: Remote socket (FD=620) initialized
2015.02.04 12:10:31 LOG6[12516]: SNI: sending servername: fix-md-ate.lmaxtrader.com
2015.02.04 12:10:31 LOG7[12516]: SSL state (connect): before/connect initialization
2015.02.04 12:10:31 LOG7[12516]: SSL state (connect): SSLv3 write client hello A

Already burned around 4 hours understanding what I'm doing wrong, will be glad if you could help me.

Thanks in advance,
Or.

Attention:
This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error, please notify the sender immediately by replying to this message, and delete the original message from your system without making a copy.
This e-mail is attributed to the sender and does not necessarily reflect the view of 
Markets Pulse P.S. Ltd. or any affiliate.

 

Please consider the environment before printing this email.