Thanks Mike. That's indeed was the solution. I was using 4.32 and was able to get stunnel working by using --disable-libwrap.

When I moved to 4.38 or 4.39, I got a different error. When it connects to stunnel on the other end (server), the client reports a SSL3_GET_RECORD: wrong version error. My config file did not specify the version (sslVersion is commented out). I tried setting it to each of the values (SSLv2, SSLv3, TLSv1 and all) but with no luck. Since it was working in 4.32, I"m not sure if its a config problem or an issue with the code. I'm comfortable using gdb to investigate but don't yet know enough about openssl. Any thoughts? I've gone back to 4.32 so have a working solution but would be interested in investigating further.

Athir

On 2011-07-07, at 5:18 AM, Michal Trojnara wrote:

Athir Nuaimi wrote:

...

Hi there. I've built stunnel on the Mac (including the patch for str.c) and have problem when I run it. Whenever it gets a request on one side (from a browser), I see the following in the log. The weird thing is

that

...

when I run stunnel in gdb it works??

2011.07.05 17:51:00 LOG7[6300:4297842688]: Service https started 2011.07.05 17:51:00 LOG7[6300:4297842688]: Option TCP_NODELAY set on

local

...

socket 2011.07.05 17:51:00 LOG7[6300:4297842688]: Waiting for a libwrap process 2011.07.05 17:51:00 LOG7[6300:4297842688]: Acquired libwrap process #0 2011.07.05 17:51:00 LOG3[6300:4297842688]: Unexpected socket close (read_blocking) 2011.07.05 17:51:00 LOG5[6300:4297842688]: Connection reset: 0 bytes

sent

...

to SSL, 0 bytes sent to socket

Any advice would be appreciated.

There's something wrong with libwrap support.

You can just disable it with: libwrap = no configuration option.

Mike _______________________________________________ stunnel-users mailing list stunnel-users@stunnel.org http://stunnel.mirt.net/mailman/listinfo/stunnel-users