Thanks for the tip Michal.

I figured out the problem. There was an undocumented change in the format of the env var SSL_CLIENT_DN.

I was using this code to extract the CN:

char *cn = strstr(env, "/CN=");

Now I need to use this:

char *cn = strstr(env, " CN=");

Seems like a pointless change. But a change that should have been documented.

Scott

On Sun, May 3, 2015 at 10:59 PM, Michal Trojnara <Michal.Trojnara@mirt.net> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Scott Weisman wrote:

> exec = /opt/cmf/bin/cf-server execargs = /opt/cmf/bin/cf-server -p
> /opt/jail/stunnel/pipes/
[cut]
> 2015.05.01 15:37:33 LOG6[main]: Child process 2899 terminated on
> signal 11

Your /opt/cmf/bin/cf-server died with signal 11, i.e., SIGSEGV.
The proper course of action is to enable creating core files with
"ulimit -c unlimited", create the core file, and inspect it with gdb.

Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=fjzb
-----END PGP SIGNATURE-----
_______________________________________________
stunnel-users mailing list
stunnel-users@stunnel.org
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users