
Hi, I have an application which uses stunnel. Using stunnel 4.25 everything works fine. If I replace this with stunnel 4.49, I get an error, see the log : No limit detected for the number of clients make_sockets: s_socket#1: FD=228 allocated (blocking mode) make_sockets: s_socket#2: FD=232 allocated (blocking mode) make_sockets: s_accept: FD=236 allocated (non-blocking mode) stunnel 4.49 on x86-pc-mingw32-gnu platform Compiled/running with OpenSSL 0.9.8r-fips 8 Feb 2011 Threading:WIN32 SSL:ENGINE,FIPS Auth:none Sockets:SELECT,IPv6 Reading configuration from file stunnel.conf FIPS_mode_set: 2D06906E: error:2D06906E:FIPS routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does not match Server is down My stunnel.conf : cert = my.keycrt socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 verify = 3 CApath = certs CAfile = cacert.pem debug = 7 ; output = c:\Program Files\stunnel\stunnel.log client = yes [Server] accept = 6051 connect = server.example.com:8051 What am I doing wrong ? I'm trying this on Win7-64bit. On WinXP-32bit it works fine. Thanks for any clarification, Regards, Koenraad Lelong.

Koenraad Lelong wrote:
FIPS_mode_set: 2D06906E: error:2D06906E:FIPS routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does not match [cut] What am I doing wrong ? I'm trying this on Win7-64bit. On WinXP-32bit it works fine.
I guess OpenSSL DLLs may have been relocated on Win7-64bit. I'm also working on native 64-bit stunnel Windows build. You may disable FIPS mode with: fips = no option of stunnel.conf. Mike

On 29-11-11 12:20, Michal Trojnara wrote:
Koenraad Lelong wrote:
FIPS_mode_set: 2D06906E: error:2D06906E:FIPS routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does not match [cut] What am I doing wrong ? I'm trying this on Win7-64bit. On WinXP-32bit it works fine.
I guess OpenSSL DLLs may have been relocated on Win7-64bit. I'm also working on native 64-bit stunnel Windows build.
You may disable FIPS mode with: fips = no option of stunnel.conf.
Mike
Thanks, that fixed it. Regards, Koenraad Lelong.
participants (2)
-
Koenraad Lelong
-
Michal Trojnara