Hello,
I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt.
Setup is done for ORACLE and WEB. Oracle`s listener is setup with "USE_SHARED_SOCKET = TRUE" variable and works fine with OpenSSH with PUTTY
I use default configuration just with the needed basic customization:
# ##Client
cert = stunnel.pem
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
debug = 7
output = stunnel.log
client = yes
[web]
accept = 3128
connect = 10.160.1.220:3128
[oracle]
accept = 1521
connect = 10.160.1.220:4892
### Server:
cert = stunnel.pem
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
[web]
accept = 3128
connect = 10.160.0.4:3128
[oracle]
accept = 4892
connect = 10.160.1.220:1521
Any good sugestions?
Thanks for your answers
Regards
Robert
Gallas Róbert wrote:
I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt.
Setup is done for ORACLE and WEB. Oracle`s listener is setup with “USE_SHARED_SOCKET = TRUE” variable and works fine with OpenSSH with PUTTY
[cut]
client = yes
[cut]
[oracle] accept = 1521 connect = 10.160.1.220:4892
1. Are you sure your Oracle client is configured to connect 127.0.0.1:1521 instead of 10.160.1.220:1521?
2. How did you realize that it `does not encrypt'?
Best regards, Mike
1. Yes I`m sure. I use the same connection string to tunnel connect using OpenSSH and putty. And it works fine. But it is the same with http port forward. It seems that no connection through my stunnel setup is encrypted.
2. I use Ethereal on serverside of tunnel. It shows no SSH type packet, as oposite OpenSSH and putty shows just SSH packet, and also I`m able to see in packet my SQL request (trivial select sysdate from dual) and also the responce. The same situation is with http port forward. I apologize I would have to mention that I`m using Ethereal to inspect packets. Tomorow I can send you output from ET. ( :-) )
I do not know if my setup is wrong or not, if I have to switch on some "switch" to begin encryption or stunnel should encrypt by default.
Regards Robert
________________________________
From: stunnel-users-bounces@mirt.net on behalf of Michal Trojnara Sent: Wed 7/12/2006 5:34 PM To: stunnel-users@mirt.net Subject: Re: [stunnel-users] newbie: stunnel works but do not encrypt
Gallas Róbert wrote:
I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt.
Setup is done for ORACLE and WEB. Oracle`s listener is setup with "USE_SHARED_SOCKET = TRUE" variable and works fine with OpenSSH with PUTTY
[cut]
client = yes
[cut]
[oracle] accept = 1521 connect = 10.160.1.220:4892
1. Are you sure your Oracle client is configured to connect 127.0.0.1:1521 instead of 10.160.1.220:1521?
2. How did you realize that it `does not encrypt'?
Best regards, Mike _______________________________________________ stunnel-users mailing list stunnel-users@mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users
I apologize. I inspected it once again. Connection was good but no packet contained my query and responce. It was encrypted. I did not found any SSH type packets because connection is not made on 22 port which I was looking for. Everything works fine just out of the box.
I`m very sorry again for confusing you.
Best regards Robert
-----Original Message----- From: stunnel-users-bounces@mirt.net [mailto:stunnel-users-bounces@mirt.net] On Behalf Of Michal Trojnara Sent: Wednesday, July 12, 2006 5:34 PM To: stunnel-users@mirt.net Subject: Re: [stunnel-users] newbie: stunnel works but do not encrypt
Gallas Róbert wrote:
I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt.
Setup is done for ORACLE and WEB. Oracle`s listener is setup with "USE_SHARED_SOCKET = TRUE" variable and works fine with OpenSSH with PUTTY
[cut]
client = yes
[cut]
[oracle] accept = 1521 connect = 10.160.1.220:4892
1. Are you sure your Oracle client is configured to connect 127.0.0.1:1521 instead of 10.160.1.220:1521?
2. How did you realize that it `does not encrypt'?
Best regards, Mike _______________________________________________ stunnel-users mailing list stunnel-users@mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users