rejetto forum

How about SSL support

Guest · 136 · 130450

0 Members and 1 Guest are viewing this topic.

Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
If everything is configured properly, you will see the Stunnel log when an user will be logged on your server.
The .Last file is a good sign.  ;)

To be continued...


Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
 ???
You do not have a file stunnel.log in your HFS folder ?


Offline Ranger

  • Tireless poster
  • ****
    • Posts: 115
    • View Profile

Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
- In file stunnel.conf of the folder of stunnel.exe , specify the path of HFS where the file stunnel.log will be created.
(Debug = 6 gives a correct result)

; Some debugging stuff useful for troubleshooting
debug = 6
output = C:\path\of\hfs folder\stunnel.log


Offline Ranger

  • Tireless poster
  • ****
    • Posts: 115
    • View Profile
- In file stunnel.conf of the folder of stunnel.exe , specify the path of HFS where the file stunnel.log will be created.
(Debug = 6 gives a correct result)

; Some debugging stuff useful for troubleshooting
debug = 6
output = C:\path\of\hfs folder\stunnel.log


Yup added exactly that.

Code: [Select]
; Some debugging stuff useful for troubleshooting
debug = 6
output = C:\Program Files\HFS\stunnel.log


Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
Test to see if the stunnel.log is really created in the stunnel folder, or elsewhere on your hard drive.
« Last Edit: February 21, 2009, 05:00:30 AM by SilentPliz »


Offline Ranger

  • Tireless poster
  • ****
    • Posts: 115
    • View Profile
Test to see if the stunnel.log is really created in the stunnel folder, or elsewhere on your hard drive.

Yea, stunnel.log exists in the Stunnel folder.


Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
So is that something is misconfigured in your stunnel.conf

The file Stunnel.log should be created in the folder of hfs.exe

stunnel.conf eg:

cert = stunnel.pem
key = stunnel.pem

socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

compression = zlib

options = ALL
options = NO_SSLv2

debug = 6
output = C:\HFS\stunnel.log

[https]
accept = 0.0.0.0:58620
connect = 127.0.0.1:44300
local = 192.168.1.3
TIMEOUTclose = 0
« Last Edit: February 23, 2009, 04:15:35 PM by SilentPliz »


Offline Ranger

  • Tireless poster
  • ****
    • Posts: 115
    • View Profile
Ah got it now, I put a ; in front of the original debug but not the old path. I just overwrote it with the new path.

Thanks for all the help.


Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile

Offline Mars

  • Operator
  • Tireless poster
  • *****
    • Posts: 2043
    • View Profile

Offline SilentPliz

  • Operator
  • Tireless poster
  • *****
    • Posts: 1298
  • ....... chut ! shh!
    • View Profile
J'y vais tout de suite. zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz


Offline jaron840

  • Occasional poster
  • *
    • Posts: 3
    • View Profile
hello i need major help.. I hate askin so i spend 2 days to no avail lol.. router port https: 443.. HFS domain name and have it looking for port 80.. I read everything i could about this :(.. the other guy had proxy issues i don't.. firefox and ie = no proxy.. i have to put "client = yes" in my conf.file or it will bring up an error on ssl accept.. HFS Ban List = \127.0.0.1;192.168.2.*.. here it is.. oh and everything works without stunnel untill i changed the ports for stunnel.

2009.03.15 04:07:02 LOG6[3316:4076]: Compression enabled using zlib method
2009.03.15 04:07:02 LOG7[3316:4076]: RAND_status claims sufficient entropy for the PRNG
2009.03.15 04:07:02 LOG7[3316:4076]: PRNG seeded successfully
2009.03.15 04:07:02 LOG7[3316:4076]: Configuration SSL options: 0x01000FFF
2009.03.15 04:07:02 LOG7[3316:4076]: SSL options set: 0x01000FFF
2009.03.15 04:07:02 LOG7[3316:4076]: Certificate: stunnel.pem
2009.03.15 04:07:02 LOG7[3316:4076]: Certificate loaded
2009.03.15 04:07:02 LOG7[3316:4076]: Key file: stunnel.pem
2009.03.15 04:07:02 LOG7[3316:4076]: Private key loaded
2009.03.15 04:07:02 LOG7[3316:4076]: SSL context initialized for service https
2009.03.15 04:07:02 LOG5[3316:4076]: stunnel 4.26 on x86-pc-mingw32-gnu with OpenSSL 0.9.8i 15 Sep 2008
2009.03.15 04:07:02 LOG5[3316:4076]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv6
2009.03.15 04:07:02 LOG5[3316:4092]: No limit detected for the number of clients
2009.03.15 04:07:02 LOG7[3316:4092]: FD 204 in non-blocking mode
2009.03.15 04:07:02 LOG7[3316:4092]: SO_REUSEADDR option set on accept socket
2009.03.15 04:07:02 LOG7[3316:4092]: https bound to 0.0.0.0:443
2009.03.15 04:08:12 LOG7[3316:4092]: https accepted FD=236 from 74.196.173.16:4757
2009.03.15 04:08:12 LOG7[3316:4092]: Creating a new thread
2009.03.15 04:08:12 LOG7[3316:4092]: New thread created
2009.03.15 04:08:12 LOG7[3316:3748]: https started
2009.03.15 04:08:12 LOG7[3316:3748]: FD 236 in non-blocking mode
2009.03.15 04:08:12 LOG7[3316:3748]: TCP_NODELAY option set on local socket
2009.03.15 04:08:12 LOG5[3316:3748]: https accepted connection from 74.196.173.16:4757
2009.03.15 04:08:12 LOG7[3316:3748]: FD 268 in non-blocking mode
2009.03.15 04:08:12 LOG7[3316:3748]: https connecting 127.0.0.1:80
2009.03.15 04:08:12 LOG7[3316:3748]: connect_wait: waiting 10 seconds
2009.03.15 04:08:12 LOG7[3316:3748]: connect_wait: connected
2009.03.15 04:08:12 LOG5[3316:3748]: https connected remote server from 192.168.2.76:4758
2009.03.15 04:08:12 LOG7[3316:3748]: Remote FD=268 initialized
2009.03.15 04:08:12 LOG7[3316:3748]: TCP_NODELAY option set on remote socket
2009.03.15 04:08:12 LOG7[3316:3748]: SSL state (connect): before/connect initialization
2009.03.15 04:08:12 LOG7[3316:3748]: SSL state (connect): SSLv3 write client hello A
2009.03.15 04:08:12 LOG3[3316:3748]: SSL_connect: Peer suddenly disconnected
2009.03.15 04:08:12 LOG5[3316:3748]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
2009.03.15 04:08:12 LOG7[3316:3748]: https finished (0 left)

-----------------------------------------------------------------------------------------------------------

cert = stunnel.pem
key = stunnel.pem

socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

compression = zlib

options = ALL
options = NO_SSLv2

debug = 7
output = stunnel.log

client = yes

[https]
accept = 0.0.0.0:443
connect = 127.0.0.1:80
local = 192.168.2.76
TIMEOUTclose = 0
« Last Edit: March 15, 2009, 08:31:11 PM by jaron840 »


Offline jaron840

  • Occasional poster
  • *
    • Posts: 3
    • View Profile
Also, when i try to access stunnel in IE it doesn't register.. just says page can't be displayed.. and in firefox it reaches stunnel and hfs recieves connection for like a split second.. can see it on the hfs server.. but then disconnects.. anyone have any idea?


Offline jaron840

  • Occasional poster
  • *
    • Posts: 3
    • View Profile
Woot got it working if anyone else has this problem.. it is because the server you created doesn't have an authorized SSL certification.. and you have to pay big bucks for them.. firefox wasn't even giving me info that said it was because of this.. i finally went crazy in the firefox config options... firefox -> tools -> options -> advanced -> server.. add your cite to firefox.. downside you have to do this on most of the computers you access the server from.. some older browsers might ask you to confirm but i didn't want an older browser