
Hello, I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt. Setup is done for ORACLE and WEB. Oracle`s listener is setup with "USE_SHARED_SOCKET = TRUE" variable and works fine with OpenSSH with PUTTY I use default configuration just with the needed basic customization: # ##Client cert = stunnel.pem socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 debug = 7 output = stunnel.log client = yes [web] accept = 3128 connect = 10.160.1.220:3128 [oracle] accept = 1521 connect = 10.160.1.220:4892 ### Server: cert = stunnel.pem socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 [web] accept = 3128 connect = 10.160.0.4:3128 [oracle] accept = 4892 connect = 10.160.1.220:1521 Any good sugestions? Thanks for your answers Regards Robert

Gallas Róbert wrote:
I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt.
Setup is done for ORACLE and WEB. Oracle`s listener is setup with “USE_SHARED_SOCKET = TRUE” variable and works fine with OpenSSH with PUTTY [cut] client = yes [cut] [oracle] accept = 1521 connect = 10.160.1.220:4892
1. Are you sure your Oracle client is configured to connect 127.0.0.1:1521 instead of 10.160.1.220:1521? 2. How did you realize that it `does not encrypt'? Best regards, Mike

1. Yes I`m sure. I use the same connection string to tunnel connect using OpenSSH and putty. And it works fine. But it is the same with http port forward. It seems that no connection through my stunnel setup is encrypted. 2. I use Ethereal on serverside of tunnel. It shows no SSH type packet, as oposite OpenSSH and putty shows just SSH packet, and also I`m able to see in packet my SQL request (trivial select sysdate from dual) and also the responce. The same situation is with http port forward. I apologize I would have to mention that I`m using Ethereal to inspect packets. Tomorow I can send you output from ET. ( :-) ) I do not know if my setup is wrong or not, if I have to switch on some "switch" to begin encryption or stunnel should encrypt by default. Regards Robert ________________________________ From: stunnel-users-bounces@mirt.net on behalf of Michal Trojnara Sent: Wed 7/12/2006 5:34 PM To: stunnel-users@mirt.net Subject: Re: [stunnel-users] newbie: stunnel works but do not encrypt Gallas Róbert wrote:
I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt.
Setup is done for ORACLE and WEB. Oracle`s listener is setup with "USE_SHARED_SOCKET = TRUE" variable and works fine with OpenSSH with PUTTY [cut] client = yes [cut] [oracle] accept = 1521 connect = 10.160.1.220:4892
1. Are you sure your Oracle client is configured to connect 127.0.0.1:1521 instead of 10.160.1.220:1521? 2. How did you realize that it `does not encrypt'? Best regards, Mike _______________________________________________ stunnel-users mailing list stunnel-users@mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users

I apologize. I inspected it once again. Connection was good but no packet contained my query and responce. It was encrypted. I did not found any SSH type packets because connection is not made on 22 port which I was looking for. Everything works fine just out of the box. I`m very sorry again for confusing you. Best regards Robert -----Original Message----- From: stunnel-users-bounces@mirt.net [mailto:stunnel-users-bounces@mirt.net] On Behalf Of Michal Trojnara Sent: Wednesday, July 12, 2006 5:34 PM To: stunnel-users@mirt.net Subject: Re: [stunnel-users] newbie: stunnel works but do not encrypt Gallas Róbert wrote:
I setup stunnel( v4.15 win32 port ) on both side, client and server. Connection is working but does not encrypt.
Setup is done for ORACLE and WEB. Oracle`s listener is setup with "USE_SHARED_SOCKET = TRUE" variable and works fine with OpenSSH with PUTTY [cut] client = yes [cut] [oracle] accept = 1521 connect = 10.160.1.220:4892
1. Are you sure your Oracle client is configured to connect 127.0.0.1:1521 instead of 10.160.1.220:1521? 2. How did you realize that it `does not encrypt'? Best regards, Mike _______________________________________________ stunnel-users mailing list stunnel-users@mirt.net http://stunnel.mirt.net/mailman/listinfo/stunnel-users
participants (2)
-
Gallas Róbert
-
Michal Trojnara