stunnel will not start

This is a discussion on stunnel will not start within the Stunnel Users forums, part of the Networking and Network Related category; I am tring to start stunnel version 4.05 that come standard with Suse Enterprise 9 CD. I intend to ...


Go Back   Usenet Forums > Networking and Network Related > Stunnel Users

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-27-2006
trevor_obba@yahoo.co.uk
 
Posts: n/a
Default stunnel will not start

I am tring to start stunnel version 4.05 that come standard with Suse
Enterprise 9 CD.

I intend to start stunnel as a daemon, I have generate and self signed
the certificate using openssl with openssl version 0.9.7d but stunnel
will not start up instead I received the following error message

Starting stunnel (SSL tunnel) please see /var/log/rc.stunnel.log
failed

in my log fail file;

stunnel[29384]: SSL_accept: Peer suddenly disconnected

Reply With Quote
  #2 (permalink)  
Old 01-27-2006
trevor_obba@yahoo.co.uk
 
Posts: n/a
Default Re: stunnel will not start


trevor_obba@yahoo.co.uk wrote:
> I am tring to start stunnel version 4.05 that come standard with Suse
> Enterprise 9 CD.
>
> I intend to start stunnel as a daemon, I have generate and self signed
> the certificate using openssl with openssl version 0.9.7d but stunnel
> will not start up instead I received the following error message
>
> Starting stunnel (SSL tunnel) please see /var/log/rc.stunnel.log
> failed
>
> in my log fail file;
>
> stunnel[29384]: SSL_accept: Peer suddenly disconnected


Here is my stunnel.conf

# Sample stunnel configuration file
# Copyright by Michal Trojnara 2002
# --with changes for SuSE package

# client = yes | no
# client mode (remote service uses SSL)
# default: no (server mode)
client = no

#
# chroot + user (comment out to disable)
#
chroot = /var/lib/stunnel/
setuid = stunnel
setgid = nogroup
# note about the chroot feature and the "exec" keyword to start other
services..
..
# while the init script /etc/init.d/stunnel will copy the binaries and
libraries

# into the chroot jail, more files might be needed in the jail
(configuration
# files etc.)

pid = /var/run/stunnel.pid

#
# debugging
#
#debug = 7
#output = stunnel.log

# Workaround for Eudora bug
#options = DONT_INSERT_EMPTY_FRAGMENTS

#
# Authentication stuff
#
#verify = 2
# don't forget about c_rehash CApath
# it is located inside chroot jail:
#CApath = /certs
# or simply use CAfile instead:
#CAfile = /etc/stunnel/certs.pem

cert = /etc/stunnel/stunnel.pem

#
# Examples for service-level configuration:
#

# [pop3s]
# accept = 995
# connect = 110

# [imaps]
# accept = 993
# connect = 143

# [imaps]
# accept = 993
# exec = /usr/sbin/imapd
# execargs = imapd
# pty = no

# [ssmtp]
# accept = 465
# connect = 25

[s1]
# accept = 5000
# connect = mail.example.com:110
# delay = yes

# [s2]
# accept = 5001
# connect = mail.example.com:25

# [https]
# accept = 443
# connect = 80
# TIMEOUTclose = 0

# [swat]
# accept = 902
# connect = 901

#
# mysql over stunnel example:
#
# [mysqls] <-- on the server
# accept = 3307
# connect = localhost:mysql
# client = yes <-- on the client
# [mysqls]
# accept = 3307
# connect = remote-mysql-server.example.com:3307
#
# Hint. Use the mysql client with "-h 127.0.0.1", not "-h localhost",
because
# "localhost" will mean it will go through the local socket and ignore
the port.

#
# pppd over stunnel example:
# (note: read http://sites.inka.de/sites/bigred/devel/tcp-tcp.html ,
and
# look for better alternatives like cipe or openvpn.)
#
# [ppp] <-- on the server
# accept = 2020
# exec = /usr/sbin/pppd
# execargs = pppd local
# # the pty option doesn't work in chroot jail without further efforts
# #pty = yes
#
#
# [ppp] <-- on the "client"
#
# pppd over stunnel example:
# (note: read http://sites.inka.de/sites/bigred/devel/tcp-tcp.html ,
and
# look for better alternatives like cipe or openvpn.)
#
# [ppp] <-- on the server
# accept = 2020
# exec = /usr/sbin/pppd
# execargs = pppd local
# # the pty option doesn't work in chroot jail without further efforts
# #pty = yes
#
#
# [ppp] <-- on the "client"
# connect = host.example.com:2020
# exec = /usr/sbin/pppd
# execargs = pppd local nodeflate nobsdcomp 192.168.20.20:192.168.20.21
# # the pty option doesn't work in chroot jail without further efforts
# #pty = yes

Can you help please

Reply With Quote
  #3 (permalink)  
Old 01-31-2006
trevor_obba@yahoo.co.uk
 
Posts: n/a
Default Re: stunnel will not start


trevor_obba@yahoo.co.uk wrote:
> trevor_obba@yahoo.co.uk wrote:
> > I am tring to start stunnel version 4.05 that come standard with Suse
> > Enterprise 9 CD.
> >
> > I intend to start stunnel as a daemon, I have generate and self signed
> > the certificate using openssl with openssl version 0.9.7d but stunnel
> > will not start up instead I received the following error message
> >
> > Starting stunnel (SSL tunnel) please see /var/log/rc.stunnel.log
> > failed
> >
> > in my log fail file;
> >
> > stunnel[29384]: SSL_accept: Peer suddenly disconnected

>
> Here is my stunnel.conf
>
> # Sample stunnel configuration file
> # Copyright by Michal Trojnara 2002
> # --with changes for SuSE package
>
> # client = yes | no
> # client mode (remote service uses SSL)
> # default: no (server mode)
> client = no
>
> #
> # chroot + user (comment out to disable)
> #
> chroot = /var/lib/stunnel/
> setuid = stunnel
> setgid = nogroup
> # note about the chroot feature and the "exec" keyword to start other
> services..
> .
> # while the init script /etc/init.d/stunnel will copy the binaries and
> libraries
>
> # into the chroot jail, more files might be needed in the jail
> (configuration
> # files etc.)
>
> pid = /var/run/stunnel.pid
>
> #
> # debugging
> #
> #debug = 7
> #output = stunnel.log
>
> # Workaround for Eudora bug
> #options = DONT_INSERT_EMPTY_FRAGMENTS
>
> #
> # Authentication stuff
> #
> #verify = 2
> # don't forget about c_rehash CApath
> # it is located inside chroot jail:
> #CApath = /certs
> # or simply use CAfile instead:
> #CAfile = /etc/stunnel/certs.pem
>
> cert = /etc/stunnel/stunnel.pem
>
> #
> # Examples for service-level configuration:
> #
>
> # [pop3s]
> # accept = 995
> # connect = 110
>
> # [imaps]
> # accept = 993
> # connect = 143
>
> # [imaps]
> # accept = 993
> # exec = /usr/sbin/imapd
> # execargs = imapd
> # pty = no
>
> # [ssmtp]
> # accept = 465
> # connect = 25
>
> [s1]
> # accept = 5000
> # connect = mail.example.com:110
> # delay = yes
>
> # [s2]
> # accept = 5001
> # connect = mail.example.com:25
>
> # [https]
> # accept = 443
> # connect = 80
> # TIMEOUTclose = 0
>
> # [swat]
> # accept = 902
> # connect = 901
>
> #
> # mysql over stunnel example:
> #
> # [mysqls] <-- on the server
> # accept = 3307
> # connect = localhost:mysql
> # client = yes <-- on the client
> # [mysqls]
> # accept = 3307
> # connect = remote-mysql-server.example.com:3307
> #
> # Hint. Use the mysql client with "-h 127.0.0.1", not "-h localhost",
> because
> # "localhost" will mean it will go through the local socket and ignore
> the port.
>
> #
> # pppd over stunnel example:
> # (note: read http://sites.inka.de/sites/bigred/devel/tcp-tcp.html ,
> and
> # look for better alternatives like cipe or openvpn.)
> #
> # [ppp] <-- on the server
> # accept = 2020
> # exec = /usr/sbin/pppd
> # execargs = pppd local
> # # the pty option doesn't work in chroot jail without further efforts
> # #pty = yes
> #
> #
> # [ppp] <-- on the "client"
> #
> # pppd over stunnel example:
> # (note: read http://sites.inka.de/sites/bigred/devel/tcp-tcp.html ,
> and
> # look for better alternatives like cipe or openvpn.)
> #
> # [ppp] <-- on the server
> # accept = 2020
> # exec = /usr/sbin/pppd
> # execargs = pppd local
> # # the pty option doesn't work in chroot jail without further efforts
> # #pty = yes
> #
> #
> # [ppp] <-- on the "client"
> # connect = host.example.com:2020
> # exec = /usr/sbin/pppd
> # execargs = pppd local nodeflate nobsdcomp 192.168.20.20:192.168.20.21
> # # the pty option doesn't work in chroot jail without further efforts
> # #pty = yes
>
> Can you help please



I am sorry for sending you this unsolicted mail but I need your help
please
i install stunnel version 3.14 on my suse enterprise linux 8 and I use
the to tunnel smpt from port 25 to port 465 this worked fine I use this
command stunnel -c -r cyrus.bbc.co.uk:465

I upgraded my machine to suse enterprise linux 9 and install stunnet
4.05 and when I try to run this same command stunnel -c -r
cyrus.bbc.co.uk:465 I get the following error stunnel [filename] | -fd
[n] | -help | -version | -sockets

Here is my configuration file
client = no

chroot = /var/lib/stunnel/
setuid = stunnel
setgid = nogroup

pid = /var/run/stunnel.pid

debug = 7
output = stunnel.log

cert = /etc/stunnel/stunnel.pem
[ssmtp]
accept = 25
connect = cyrus.bbc.co.uk:465

when I run this command stunnel /etc/stunnel/stunnel.conf
I don't any get error nor do I get smtps connection either

Can you help please? I do I run stunnel, to tunnel smtp from(port 25)
to smtps(port 465) can you help please



Thanks

Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 07:29 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0