[stunnel-users] problem migrating from 4.54 to 5.x

Scott Weisman sweisman at pobox.com
Mon May 4 08:39:11 CEST 2015


Thanks for the tip Michal.

I figured out the problem. There was an undocumented change in the format
of the env var SSL_CLIENT_DN.

I was using this code to extract the CN:

    char *cn = strstr(env, "/CN=");

Now I need to use this:

    char *cn = strstr(env, " CN=");

Seems like a pointless change. But a change that should have been
documented.

Scott

On Sun, May 3, 2015 at 10:59 PM, Michal Trojnara <Michal.Trojnara at mirt.net>
wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Scott Weisman wrote:
>
> > exec = /opt/cmf/bin/cf-server execargs = /opt/cmf/bin/cf-server -p
> > /opt/jail/stunnel/pipes/
> [cut]
> > 2015.05.01 15:37:33 LOG6[main]: Child process 2899 terminated on
> > signal 11
>
> Your /opt/cmf/bin/cf-server died with signal 11, i.e., SIGSEGV.
> The proper course of action is to enable creating core files with
> "ulimit -c unlimited", create the core file, and inspect it with gdb.
>
> Mike
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQIcBAEBAgAGBQJVRn4HAAoJEC78f/DUFuAUw8cQALcaTNk+xERG3eEfacv+Sg5s
> nJGr/Nlgk5NozFlBY0LiE1Sv8n28ExNMegVrwqkio/1xS8sGT3UEQWbNGRsL9KPD
> 9OHx1jY4xkmcY8t9hIRghMl6UPzFAr7yeJfbcsQbF5p+Zxp1szwCWDhXunhRShWR
> hKEdJ1qNOehBfAOM1j65cpPZGhLb8CdvI5wioM9qms62+jPH0p7OR0Pcxj/AUfYY
> 98P6VZBf3R27Nwxa1suI9l2UFhrO5SWcGwB2mhqQyID4U6iSelnjZkly91gJ8fv+
> 7VKzF1Xnp+5hL9tY0Yb1pjRMDmk6R6UuQbXWKLkoTbGKTl0Mr5r+rifLd/vh+F8z
> VbRa9Gd0aaOpdnYs+KaeOV6iou0scjhpxM78SFo0HMBIs18+baXfGZNbRjnvD3Gw
> aaBgnOQuPuXUGPfwIfTnP0HUo3P7+ZRng7620EDUTskIrO0WIinzWHkMhwfpqpgq
> /PFp+7YTrxnfMCBU6UAoONk/Tr0jrTv9eVBkvykk2Qfhm6fEem2jrqWzOuiS5jkg
> z3epcuPdXTkamI0gAQ3dJo3TmFw8Ai6Q46/7CJVTxYGzwgIXf3yNNGpUEWNrC9R6
> KpfPfB2A4sT3J3oHdXh7I/q0BcBgpAF/CvooRdCA+Ib8tzOzWeM9kzprzxowhtDt
> tSko3NkMnv0ihEi5S8fu
> =fjzb
> -----END PGP SIGNATURE-----
> _______________________________________________
> stunnel-users mailing list
> stunnel-users at stunnel.org
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20150504/471b7adb/attachment.html>


More information about the stunnel-users mailing list