[stunnel-users] qmail+tcpserver+stunnel-4.x

[Scott Geiger]

Does anyone have a good link to setting up qmail to use stunnel for pop3s?  I
have found a few, but so far nothing seems to work from me.

When I test with telnet it closes the connection immediately and tcpserver exits
with status 11.

tcpserver: status: 0/20
tcpserver: status: 1/20
tcpserver: pid 32660 from 128.226.61.66
tcpserver: ok 32660 242.70-84-9.reverse.theplanet.com:70.84.9.242:995
:128.226.61.66::26733
2005.05.06 15:37:18 LOG5[32660:1]: stunnel 4.10 on i686-pc-linux-gnu
UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL 0.9.7g 11 Apr 2005
2005.05.06 15:37:18 LOG7[32660:1]: Snagged 64 random bytes from /root/.rnd
2005.05.06 15:37:18 LOG7[32660:1]: Wrote 1024 new random bytes to /root/.rnd
2005.05.06 15:37:18 LOG7[32660:1]: RAND_status claims sufficient entropy for the
PRNG
2005.05.06 15:37:18 LOG6[32660:1]: PRNG seeded successfully
2005.05.06 15:37:18 LOG7[32660:1]: Configuration SSL options: 0x01000000
2005.05.06 15:37:18 LOG7[32660:1]: SSL options set: 0x01000000
2005.05.06 15:37:18 LOG7[32660:1]: Certificate: /etc/stunnel/stunnel.pem
2005.05.06 15:37:18 LOG7[32660:1]: Key file: /etc/stunnel/stunnel.pem
2005.05.06 15:37:18 LOG7[32660:1]: stunnel started
2005.05.06 15:37:18 LOG7[32660:1]: FD 0 in non-blocking mode
2005.05.06 15:37:18 LOG7[32660:1]: FD 1 in non-blocking mode
2005.05.06 15:37:18 LOG6[32660:1]: Local mode child started (PID=32661)
2005.05.06 15:37:18 LOG5[32660:1]: stunnel connected from 127.0.0.1:41860
2005.05.06 15:37:18 LOG7[32660:1]: FD 3 in non-blocking mode
2005.05.06 15:37:18 LOG7[32660:1]: stunnel connecting 127.0.0.1:110
2005.05.06 15:37:18 LOG7[32660:1]: connect_wait: waiting 10 seconds
2005.05.06 15:37:18 LOG7[32660:0]: Waiting 10 second(s) for 1 file descriptor(s)
tcpserver: end 32660 status 11
tcpserver: status: 0/20


If is use openssl's s_client (openssl s_client -connect
mail.bcmediagroup.com:995 -state) I get:

CONNECTED(00000003)
SSL_connect:before/connect initialization
SSL_connect:SSLv2/v3 write client hello A
SSL_connect:error in SSLv2/v3 read server hello A
write:errno=104


Scott Geiger