pkgsrc-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Latest stunnel is broken



Hi,

I've recently been trying to update stunnel from 4.20nb3 to stunnel-4.24nb1 on an amd64 system running -current. No matter what I try, I can't get it to work, and I'm afraid to break other machines.

With the same, working configuration file, I see five instances of stunnel (four owned by root, one by nobody) instead of just one owned by nobody. I see connections coming in, but nothing happens, and the connections eventually die on their own.

Without changing the config file, I can downgrade from 4.24 to 4.20, launch, and everything works fine.

Here's a debug output of a connection:

2008.06.02 22:48:05 LOG7[14928:140187669626880]: Waiting for a libwrap process
2008.06.02 22:48:05 LOG7[14928:140187669626880]: Acquired libwrap process #2
2008.06.02 22:48:27 LOG7[14928:140187730444288]: imaps accepted FD=18 from 
72.37.180.250:30039
2008.06.02 22:48:27 LOG7[14928:140187667529728]: imaps started
2008.06.02 22:48:27 LOG7[14928:140187667529728]: FD 18 in non-blocking mode
2008.06.02 22:48:27 LOG7[14928:140187667529728]: TCP_NODELAY option set on 
local socket
2008.06.02 22:48:27 LOG7[14928:140187667529728]: Waiting for a libwrap process
2008.06.02 22:48:27 LOG7[14928:140187667529728]: Acquired libwrap process #3
2008.06.02 22:49:31 LOG7[14928:140187730444288]: imaps accepted FD=19 from 
72.37.180.250:10826
2008.06.02 22:49:31 LOG7[14928:140187665432576]: imaps started
2008.06.02 22:49:31 LOG7[14928:140187665432576]: FD 19 in non-blocking mode
2008.06.02 22:49:31 LOG7[14928:140187665432576]: TCP_NODELAY option set on 
local socket
2008.06.02 22:49:31 LOG7[14928:140187665432576]: Waiting for a libwrap process
2008.06.02 22:49:31 LOG7[14928:140187665432576]: Acquired libwrap process #4
(nothing - each connection just times out after a while)

Here's a working connection from 4.20:

2008.06.02 23:18:06 LOG7[11289:140187730444288]: pop3s accepted FD=17 from 
72.37.180.250:31781
2008.06.02 23:18:06 LOG7[11289:140187661238272]: pop3s started
2008.06.02 23:18:06 LOG7[11289:140187661238272]: FD 17 in non-blocking mode
2008.06.02 23:18:06 LOG7[11289:140187661238272]: TCP_NODELAY option set on 
local socket
2008.06.02 23:18:06 LOG7[11289:140187661238272]: FD 18 in non-blocking mode
2008.06.02 23:18:06 LOG7[11289:140187661238272]: FD 19 in non-blocking mode
2008.06.02 23:18:06 LOG7[11289:140187661238272]: Connection from 
72.37.180.250:31781 permitted by libwrap
2008.06.02 23:18:06 LOG5[11289:140187661238272]: pop3s accepted connection from 
72.37.180.250:3178
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): 
before/accept initialization
2008.06.02 23:18:06 LOG7[11289:140187730444288]: Cleaning up the signal pipe
2008.06.02 23:18:06 LOG6[11289:140187730444288]: Child process 1134 finished 
with code 0
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 read 
client hello A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 
write server hello A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 
write certificate A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 
write server done A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 
flush data
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 read 
client key exchange A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 read 
finished A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 
write change cipher spec A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 
write finished A
2008.06.02 23:18:06 LOG7[11289:140187661238272]: SSL state (accept): SSLv3 
flush data

Does anyone have any clues about what broke? Is anyone else successfully using stunnel 4.24?

Thanks,
John Klos


Home | Main Index | Thread Index | Old Index