Sponsored Content
Full Discussion: stunnel will not start
Top Forums UNIX for Advanced & Expert Users stunnel will not start Post 97360 by hassan1 on Sunday 29th of January 2006 12:00:15 PM
Old 01-29-2006
stunnel will not start

am tring to start stunnel version 4.05 that come standard with Suse
Enterprise 9 CD.

I intend to start stunnel as a daemon, I have generate and self signed
the certificate using openssl with openssl version 0.9.7d but stunnel
will not start up instead I received the following error message

Starting stunnel (SSL tunnel) please see /var/log/rc.stunnel.log
failed

in my log fail file;

stunnel[29384]: SSL_accept: Peer suddenly disconnected

Here is my stunnel.conf

# Sample stunnel configuration file
# Copyright by Michal Trojnara 2002
# --with changes for SuSE package

# client = yes | no
# client mode (remote service uses SSL)
# default: no (server mode)
client = no

#
# chroot + user (comment out to disable)
#
chroot = /var/lib/stunnel/
setuid = stunnel
setgid = nogroup
# note about the chroot feature and the "exec" keyword to start other
services..
.
# while the init script /etc/init.d/stunnel will copy the binaries and
libraries

# into the chroot jail, more files might be needed in the jail
(configuration
# files etc.)

pid = /var/run/stunnel.pid

#
# debugging
#
#debug = 7
#output = stunnel.log

# Workaround for Eudora bug
#options = DONT_INSERT_EMPTY_FRAGMENTS

#
# Authentication stuff
#
#verify = 2
# don't forget about c_rehash CApath
# it is located inside chroot jail:
#CApath = /certs
# or simply use CAfile instead:
#CAfile = /etc/stunnel/certs.pem

cert = /etc/stunnel/stunnel.pem

#
# Examples for service-level configuration:
#

# [pop3s]
# accept = 995
# connect = 110

# [imaps]
# accept = 993
# connect = 143

# [imaps]
# accept = 993
# exec = /usr/sbin/imapd
# execargs = imapd
# pty = no

# [ssmtp]
# accept = 465
# connect = 25

[s1]
# accept = 5000
# connect = mail.example.com:110
# delay = yes

# [s2]
# accept = 5001
# connect = mail.example.com:25

# [https]
# accept = 443
# connect = 80
# TIMEOUTclose = 0

# [swat]
# accept = 902
# connect = 901

#
# mysql over stunnel example:
#
# [mysqls] <-- on the server
# accept = 3307
# connect = localhost:mysql
# client = yes <-- on the client
# [mysqls]
# accept = 3307
# connect = remote-mysql-server.example.com:3307
#
# Hint. Use the mysql client with "-h 127.0.0.1", not "-h localhost",
because
# "localhost" will mean it will go through the local socket and ignore
the port.

#
# pppd over stunnel example:
# (note: read http://sites.inka.de/sites/bigred/devel/tcp-tcp.html ,
and
# look for better alternatives like cipe or openvpn.)
#
# [ppp] <-- on the server
# accept = 2020
# exec = /usr/sbin/pppd
# execargs = pppd local
# # the pty option doesn't work in chroot jail without further efforts
# #pty = yes
#
#
# [ppp] <-- on the "client"
#
# pppd over stunnel example:
# (note: read http://sites.inka.de/sites/bigred/devel/tcp-tcp.html ,
and
# look for better alternatives like cipe or openvpn.)
#
# [ppp] <-- on the server
# accept = 2020
# exec = /usr/sbin/pppd
# execargs = pppd local
# # the pty option doesn't work in chroot jail without further efforts
# #pty = yes
#
#
# [ppp] <-- on the "client"
# connect = host.example.com:2020
# exec = /usr/sbin/pppd
# execargs = pppd local nodeflate nobsdcomp 192.168.20.20:192.168.20.21
# # the pty option doesn't work in chroot jail without further efforts
# #pty = yes

Can you help please
 

6 More Discussions You Might Find Interesting

1. SCO

Starting up stunnel on SCO Openserver 5.0.7

Hi there I have compiled a binary of stunnel for SCO Openserver 5.0.7 At the moment the binary is in /u/testroom/sbin/stunnel as root I cd to /u/testroom/sbin and start the stunnel daemon up with ./stunnel The stunnel log shows when users successfully connect or disconnect, so... (1 Reply)
Discussion started by: The_Librarian
1 Replies

2. Shell Programming and Scripting

Start program in background (or start crontab ahead of time)

Hey! I'm working on a script that will add a user, create some configfiles, and add a crontab for the user. The crontab looks like the following: @reboot /home/user/program config.conf & I would like for this process to start at the end of my script under the corresponding username by... (0 Replies)
Discussion started by: noratx
0 Replies

3. UNIX for Advanced & Expert Users

Help with Getting Stunnel Running

OS: Sun Solaris 10 (5.10) Stunnel has been installed but when I try to run it, I get a directory permission error. Not sure what it means by 'Not owner' even though that's plain English. I have changed the chroot to a directory (var/tmp) that I'm sure all users have access to so not sure... (0 Replies)
Discussion started by: neapolitan
0 Replies

4. UNIX and Linux Applications

Update CRL in stunnel?

Hi, Does anyone know if there is a way to update CRLs in stunnel, without restarting stunnel? If I copy a new CRL to my CRLPath, it is only used for services (from config file) that hasn't been used yet. Services that has been used at least once does not care about new CRLs... (0 Replies)
Discussion started by: pelig
0 Replies

5. UNIX for Advanced & Expert Users

Stunnel as non root !!

HI I'm trying to install stunnel as(or in) non-root user. there are these options setuid and setgid in stunnel.conf ,that by default are "nobody". but u can change them to "user" .. to enable stunnel in non root mode I tried doing it but no luck. Please drop in your valuable suggestions ... (2 Replies)
Discussion started by: leghorn
2 Replies

6. UNIX for Beginners Questions & Answers

Splitting week start date and end date based on custom period start dates

Below are my custom period start and end dates based on a calender, these dates are placed in a file, for each period i need to split into three weeks for each period row, example is given below. Could you please help out to achieve solution through shell script.. File content: ... (2 Replies)
Discussion started by: nani2019
2 Replies
All times are GMT -4. The time now is 05:57 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy