[stunnel-users] SSL alert (write): fatal: protocol version

[René Legault]

Hi,

 

I have an issue when using Stunnel. Can somebody help  me?

 

I have a module on my network that sends non-SSL e-mail but my ISP
(Sympatico.ca) is accepting only SSL communication.

 

This is my stunnel.conf file:

 

 

cert = stunnel.pem

protocol = smtp

; Some performance tunings

socket = l:TCP_NODELAY=1

socket = r:TCP_NODELAY=1

 

; Some debugging stuff useful for troubleshooting

debug = 7

output = stunnel.log

; Use it for client mode

client = yes

; Service-level configuration

[smtp]

accept=192.168.1.17:25

connect = smtphm.sympatico.ca:25

 

 

And this is my log:

 

 

2011.12.13 19:55:06 LOG7[2468:1644]: Service smtp accepted FD=316 from
192.168.1.200:12149

2011.12.13 19:55:06 LOG7[2468:1644]: Creating a new thread

2011.12.13 19:55:06 LOG7[2468:1644]: New thread created

2011.12.13 19:55:06 LOG7[2468:2684]: Service smtp started

2011.12.13 19:55:06 LOG5[2468:2684]: Service smtp accepted connection from
192.168.1.200:12149

2011.12.13 19:55:06 LOG6[2468:2684]: connect_blocking: connecting
65.55.172.251:25

2011.12.13 19:55:06 LOG7[2468:2684]: connect_blocking: s_poll_wait
65.55.172.251:25: waiting 10 seconds

2011.12.13 19:55:06 LOG5[2468:2684]: connect_blocking: connected
65.55.172.251:25

2011.12.13 19:55:06 LOG5[2468:2684]: Service smtp connected remote server
from 192.168.1.17:3013

2011.12.13 19:55:06 LOG7[2468:2684]: Remote FD=392 initialized

2011.12.13 19:55:06 LOG6[2468:2684]: Client-mode smtp protocol negotiations
started

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 220 BLU0-SMTP6.phx.gbl Microsoft
ESMTP MAIL Service, Version: 6.0.3790.4675 ready at  Tue, 13 Dec 2011
16:55:06 -0800 

2011.12.13 19:55:06 LOG7[2468:2684]:  -> 220 BLU0-SMTP6.phx.gbl Microsoft
ESMTP MAIL Service, Version: 6.0.3790.4675 ready at  Tue, 13 Dec 2011
16:55:06 -0800 

2011.12.13 19:55:06 LOG7[2468:2684]:  -> EHLO localhost

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-BLU0-SMTP6.phx.gbl Hello
[65.94.163.170]

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-TURN

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-SIZE 41943040

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-ETRN

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-PIPELINING

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-DSN

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-ENHANCEDSTATUSCODES

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-8bitmime

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-BINARYMIME

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-CHUNKING

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-VRFY

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-TLS

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250-STARTTLS

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 250 OK

2011.12.13 19:55:06 LOG7[2468:2684]:  -> STARTTLS

2011.12.13 19:55:06 LOG7[2468:2684]:  <- 220 2.0.0 SMTP server ready

2011.12.13 19:55:06 LOG6[2468:2684]: Client-mode smtp protocol negotiations
succeeded

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): before/connect
initialization

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write client
hello A

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 read server
hello A

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 read server
certificate A

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 read server
done A

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write client
key exchange A

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write change
cipher spec A

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write
finished A

2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 flush data

2011.12.13 19:55:07 LOG7[2468:2684]: SSL state (connect): SSLv3 read
finished A

2011.12.13 19:55:07 LOG7[2468:2684]:    1 items in the session cache

2011.12.13 19:55:07 LOG7[2468:2684]: 86477 client connects (SSL_connect())

2011.12.13 19:55:07 LOG7[2468:2684]: 86477 client connects that finished

2011.12.13 19:55:07 LOG7[2468:2684]:    0 client renegotiations requested

2011.12.13 19:55:07 LOG7[2468:2684]:    0 server connects (SSL_accept())

2011.12.13 19:55:07 LOG7[2468:2684]:    0 server connects that finished

2011.12.13 19:55:07 LOG7[2468:2684]:    0 server renegotiations requested

2011.12.13 19:55:07 LOG7[2468:2684]:    0 session cache hits

2011.12.13 19:55:07 LOG7[2468:2684]:    0 external session cache hits

2011.12.13 19:55:07 LOG7[2468:2684]:    0 session cache misses

2011.12.13 19:55:07 LOG7[2468:2684]:    0 session cache timeouts

2011.12.13 19:55:07 LOG6[2468:2684]: SSL connected: new session negotiated

2011.12.13 19:55:07 LOG6[2468:2684]: Negotiated ciphers: DES-CBC3-SHA SSLv3
Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1

2011.12.13 19:55:07 LOG6[2468:2684]: Compression: null, expansion: null

2011.12.13 19:55:07 LOG7[2468:2684]: SSL alert (write): fatal: protocol
version

2011.12.13 19:55:07 LOG3[2468:2684]: SSL_read: 1408F10B: error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number

2011.12.13 19:55:07 LOG5[2468:2684]: Connection reset: 19 bytes sent to SSL,
219 bytes sent to socket

2011.12.13 19:55:07 LOG7[2468:2684]: Service smtp finished (0 left)

2011.12.13 19:55:07 LOG7[2468:2684]: str_stats: 16 block(s), 353 data
byte(s), 544 control byte(s)

 

 

What am I doing wrong?

 

Thanks

 

Rene

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20111213/8e2942af/attachment.html>