[stunnel-users] NFS over sTunnel

[Elodie BOSSIER]

Greetings again,

I have a problem to mount a NFS share via my sTunnel.

If i don't use the stunnel it's work :
#mount -t nfs 188.165.214.229:/home /mnt/nfs/
#df -h
[...]
188.165.214.229:/home
                       7.2T   12G  6.9T   1% /mnt/nfs
#umount /mnt/nfs

but if i use the stunnel client it's don't work :

#mount -t nfs 127.0.0.1:/home /mnt/nfs/
(.......sleep....... and i need to ctrl+C to stop my command)

The log into the serveur is :

2011.12.08 00:55:54 LOG7[12438:140256813074176]: nfs accepted FD=18 from 
178.33.214.192:8671
2011.12.08 00:55:54 LOG7[12438:140256812631808]: nfs started
2011.12.08 00:55:54 LOG7[12438:140256812631808]: FD 18 in non-blocking mode
2011.12.08 00:55:54 LOG7[12438:140256812631808]: TCP_NODELAY option set 
on local socket
2011.12.08 00:55:54 LOG7[12438:140256812631808]: Waiting for a libwrap 
process
2011.12.08 00:55:54 LOG7[12438:140256812631808]: Acquired libwrap process #0
2011.12.08 00:55:54 LOG7[12438:140256812631808]: Releasing libwrap 
process #0
2011.12.08 00:55:54 LOG7[12438:140256812631808]: Released libwrap process #0
2011.12.08 00:55:54 LOG7[12438:140256812631808]: nfs permitted by 
libwrap from 178.33.214.192:8671
2011.12.08 00:55:54 LOG5[12438:140256812631808]: nfs accepted connection 
from 178.33.214.192:8671
2011.12.08 00:55:54 LOG7[12438:140256812631808]: SSL state (accept): 
before/accept initialization
2011.12.08 00:55:54 LOG7[12438:140256812631808]: SSL state (accept): 
SSLv3 read client hello A
2011.12.08 00:55:54 LOG7[12438:140256812631808]: SSL state (accept): 
SSLv3 write server hello A
2011.12.08 00:55:54 LOG7[12438:140256812631808]: SSL state (accept): 
SSLv3 write change cipher spec A
2011.12.08 00:55:54 LOG7[12438:140256812631808]: SSL state (accept): 
SSLv3 write finished A
2011.12.08 00:55:54 LOG7[12438:140256812631808]: SSL state (accept): 
SSLv3 flush data
2011.12.08 00:55:54 LOG7[12438:140256812631808]: SSL state (accept): 
SSLv3 read finished A
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    1 items in the 
session cache
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    0 client connects 
(SSL_connect())
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    0 client connects 
that finished
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    0 client 
renegotiations requested
2011.12.08 00:55:54 LOG7[12438:140256812631808]:   12 server connects 
(SSL_accept())
2011.12.08 00:55:54 LOG7[12438:140256812631808]:   12 server connects 
that finished
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    0 server 
renegotiations requested
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    9 session cache hits
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    0 external session 
cache hits
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    0 session cache misses
2011.12.08 00:55:54 LOG7[12438:140256812631808]:    1 session cache timeouts
2011.12.08 00:55:54 LOG6[12438:140256812631808]: SSL accepted: previous 
session reused
2011.12.08 00:55:54 LOG7[12438:140256812631808]: FD 19 in non-blocking mode
2011.12.08 00:55:54 LOG6[12438:140256812631808]: connect_blocking: 
connecting 127.0.0.1:2049
2011.12.08 00:55:54 LOG7[12438:140256812631808]: connect_blocking: 
s_poll_wait 127.0.0.1:2049: waiting 10 seconds
2011.12.08 00:55:54 LOG5[12438:140256812631808]: connect_blocking: 
connected 127.0.0.1:2049
2011.12.08 00:55:54 LOG5[12438:140256812631808]: nfs connected remote 
server from 127.0.0.1:51193
2011.12.08 00:55:54 LOG7[12438:140256812631808]: Remote FD=19 initialized
2011.12.08 00:55:54 LOG7[12438:140256812631808]: TCP_NODELAY option set 
on remote socket

( my ctrl+C is here )

2011.12.08 00:56:58 LOG7[12438:140256812631808]: SSL alert (read): 
warning: close notify
2011.12.08 00:56:58 LOG7[12438:140256812631808]: SSL closed on SSL_read
2011.12.08 00:56:58 LOG7[12438:140256812631808]: Socket write shutdown
2011.12.08 00:56:58 LOG7[12438:140256812631808]: Socket closed on read
2011.12.08 00:56:58 LOG7[12438:140256812631808]: SSL write shutdown
2011.12.08 00:56:58 LOG7[12438:140256812631808]: SSL alert (write): 
warning: close notify
2011.12.08 00:56:58 LOG6[12438:140256812631808]: SSL_shutdown 
successfully sent close_notify
2011.12.08 00:56:58 LOG5[12438:140256812631808]: Connection closed: 76 
bytes sent to SSL, 164 bytes sent to socket
2011.12.08 00:56:58 LOG7[12438:140256812631808]: nfs finished (0 left)

(End of the log server)

My config client :
[rquotad]
accept = 1040
connect = 188.165.214.229:1041
[mountd]
accept = 1048
connect = 188.165.214.229:1049
[nfs]
accept = 2049
connect = 188.165.214.229:2050
[status]
accept = 1039
connect = 188.165.214.229:1038
[portmapper]
accept = 111
connect = 188.165.214.229:112
[nlockmgr]
accept = 1047
connect = 188.165.214.229:1046

My config server :
[rquotad]
accept = 1041
connect = 1040
[mountd]
accept = 1049
connect = 1048
[nfs]
accept = 2050
connect = 2049
[status]
accept = 1038
connect = 1039
[portmapper]
accept = 112
connect = 111
[nlockmgr]
accept = 1046
connect = 1047

Do you have an idea please ?