I'm using stunnel in client mode on a Windows 7 x64 workstation, installed using ftp://ftp.stunnel.org/stunnel/stunnel-4.52-installer.exe
Everything works until I try to check the server certificate for revocation using an OCSP server, at which point stunnel crashes whenever I make a connection.
The following error pops up in a dialog box: OPENSSL_Uplink(0FBE5000,14): no OPENSSL_Applink
My config is pretty simple:
-------------------------------------------------------------- debug = 7 # I do want FIPS enabled, but I figured one problem at a time. fips = no CAfile = ca-bundle.crt verify = 2 OCSP = http://ocsp.test.net/ options = NO_SSLv2
[test1] client = yes accept = 127.0.0.1:80 connect = web.test.net:443 --------------------------------------------------------------
The log gets as far as: 2012.03.02 11:07:41 LOG7[4296:5008]: OCSP: server connected when it crashes.
-- Mike
Michael Olson wrote:
The following error pops up in a dialog box: OPENSSL_Uplink(0FBE5000,14): no OPENSSL_Applink
I think I found the answer: http://www.openssl.org/support/faq.html#PROG2
Please try: ftp://ftp.stunnel.org/stunnel/beta/stunnel-4.53b9-installer.exe and let us know whether it works for you.
Mike
On Sun, 4 Mar 2012 23:17:14 +0100, Michal Trojnara Michal.Trojnara@mirt.net wrote:
Michael Olson wrote:
The following error pops up in a dialog box: OPENSSL_Uplink(0FBE5000,14): no OPENSSL_Applink
I think I found the answer: http://www.openssl.org/support/faq.html#PROG2
Please try: ftp://ftp.stunnel.org/stunnel/beta/stunnel-4.53b9-installer.exe and let us know whether it works for you.
Mike
No more error dialogs, although OCSP still doesn't work.
Watching it in Wireshark shows stunnel handshake with the OCSP server and then immediate send FIN without ever sending the OCSP request.
I've tried the OCSP URL with and without the final slash just in case, not sure what else I could try configuration wise.
-- Mike
Michael Olson wrote:
No more error dialogs, although OCSP still doesn't work.
I confirm something is wrong with stunnel, at least on Windows platform. I have rewritten OCSP implementation. I still need to try it on Windows. ftp://ftp.stunnel.org/stunnel/beta/stunnel-4.53b16-installer.exe
Mike
-
Michael Olson -
Michal Trojnara