Thanks for the tip Michal.
I figured out the problem. There was an undocumented change in the format of the env var SSL_CLIENT_DN.
I was using this code to extract the CN:
char *cn = strstr(env, "/CN=");
Now I need to use this:
char *cn = strstr(env, " CN=");
Seems like a pointless change. But a change that should have been documented.
Scott
On Sun, May 3, 2015 at 10:59 PM, Michal Trojnara Michal.Trojnara@mirt.net wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Scott Weisman wrote:
exec = /opt/cmf/bin/cf-server execargs = /opt/cmf/bin/cf-server -p /opt/jail/stunnel/pipes/
[cut]
2015.05.01 15:37:33 LOG6[main]: Child process 2899 terminated on signal 11
Your /opt/cmf/bin/cf-server died with signal 11, i.e., SIGSEGV. The proper course of action is to enable creating core files with "ulimit -c unlimited", create the core file, and inspect it with gdb.
Mike -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQIcBAEBAgAGBQJVRn4HAAoJEC78f/DUFuAUw8cQALcaTNk+xERG3eEfacv+Sg5s nJGr/Nlgk5NozFlBY0LiE1Sv8n28ExNMegVrwqkio/1xS8sGT3UEQWbNGRsL9KPD 9OHx1jY4xkmcY8t9hIRghMl6UPzFAr7yeJfbcsQbF5p+Zxp1szwCWDhXunhRShWR hKEdJ1qNOehBfAOM1j65cpPZGhLb8CdvI5wioM9qms62+jPH0p7OR0Pcxj/AUfYY 98P6VZBf3R27Nwxa1suI9l2UFhrO5SWcGwB2mhqQyID4U6iSelnjZkly91gJ8fv+ 7VKzF1Xnp+5hL9tY0Yb1pjRMDmk6R6UuQbXWKLkoTbGKTl0Mr5r+rifLd/vh+F8z VbRa9Gd0aaOpdnYs+KaeOV6iou0scjhpxM78SFo0HMBIs18+baXfGZNbRjnvD3Gw aaBgnOQuPuXUGPfwIfTnP0HUo3P7+ZRng7620EDUTskIrO0WIinzWHkMhwfpqpgq /PFp+7YTrxnfMCBU6UAoONk/Tr0jrTv9eVBkvykk2Qfhm6fEem2jrqWzOuiS5jkg z3epcuPdXTkamI0gAQ3dJo3TmFw8Ai6Q46/7CJVTxYGzwgIXf3yNNGpUEWNrC9R6 KpfPfB2A4sT3J3oHdXh7I/q0BcBgpAF/CvooRdCA+Ib8tzOzWeM9kzprzxowhtDt tSko3NkMnv0ihEi5S8fu =fjzb -----END PGP SIGNATURE----- _______________________________________________ stunnel-users mailing list stunnel-users@stunnel.org https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users