[stunnel-users] ssl3_get_record wrong version error

[Justin Miller]

Hi all.

I've googled this error and found various things, none
of which really help that much. What I'm trying to do
is, use stunnel to connect to an http proxy and
forward packets to/from the aim server through ssl and
the proxy. The section in my conf file for gaim looks
like this:

[gaim]
accept  = localhost:5190
connect = 64.125.109.108:80

In the proxy settings for gaim, I choose http proxy,
and name the server as 'localhost' and the port as
5190. When I check the output of stunnel, it tries to
connect to the proxy listed above, but returns with
this error: 

2004.12.07 09:20:30 LOG7[12956:1024]: gaim accepted
FD=7 from 127.0.0.1:34272
2004.12.07 09:20:30 LOG7[12956:1024]: FD 7 in
non-blocking mode
2004.12.07 09:20:30 LOG7[12960:1026]: gaim started
2004.12.07 09:20:30 LOG5[12960:1026]: gaim connected
from 127.0.0.1:34272
2004.12.07 09:20:30 LOG7[12960:1026]: FD 10 in
non-blocking mode
2004.12.07 09:20:30 LOG7[12960:1026]: gaim connecting
64.125.109.108:80
2004.12.07 09:20:30 LOG7[12960:1026]: remote connect
#1: EINPROGRESS: retrying
2004.12.07 09:20:30 LOG7[12960:1026]: waitforsocket:
FD=10, DIR=write
2004.12.07 09:20:30 LOG7[12960:1026]: waitforsocket:
ok
2004.12.07 09:20:30 LOG7[12960:1026]: Remote FD=10
initialized
2004.12.07 09:20:30 LOG7[12960:1026]: SSL state
(connect): before/connect initialization
2004.12.07 09:20:30 LOG7[12960:1026]: SSL state
(connect): SSLv3 write client hello A
2004.12.07 09:20:30 LOG7[12960:1026]: waitforsocket:
FD=10, DIR=read
2004.12.07 09:20:30 LOG7[12960:1026]: waitforsocket:
ok
2004.12.07 09:20:30 LOG7[12960:1026]: SSL alert
(write): fatal: handshake failure
2004.12.07 09:20:30 LOG3[12960:1026]: SSL_connect:
1408F10B: error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number
2004.12.07 09:20:30 LOG7[12960:1026]: gaim finished (0
left)

I'm not using the system openssl libraries, but ones
that I compiled myself and installed locally - which I
pointed stunnel to during configuration/compilation.
Any thoughts whatsoever as to what's going on here?
What is this error typical of? Is there a fix? Are my
ssl libraries somehow broken? 

I read something that mentioned a possible rollback
bug, so I have, in my conf file, the line:

options = TLS_ROLLBACK_BUG

That didn't help though.

Thanks in advance!

Justin


		
__________________________________ 
Do you Yahoo!? 
All your favorites on one personal page – Try My Yahoo!
http://my.yahoo.com