rejetto forum

HFS and sTunnel

0 Members and 1 Guest are viewing this topic.

Offline WhereEaglesDare

  • Occasional poster
  • *
    • Posts: 17
    • View Profile
I have been working on this for days.   >:(  and completed the sTunnel tutorial on the website a dozen times.  I have read the forums quite a bit and can't figure out what I am doing wrong.

Here is what I got:
I have my ports forwarded.  I have forwarded 443 and HFS is listening on 44300.  I set the stunnel.conf file to...

Quote
; Some debugging stuff useful for troubleshooting (optional)
debug = 7
output = stunnel.log

;[pop3s]
;accept  = 995
;connect = 110

;[imaps]
;accept  = 993
;connect = 143

;[ssmtp]
;accept  = 465
;connect = 25

[https]
accept  = 443
connect = 44300
TIMEOUTclose = 0

per one of the more detailed forums.

My network consists of two routers.  First router has a wireless access point and a 24 port switch and the second router connected to it.  The Second has the first going into the Uplink port and it just has the server on it.  One main router with 443 forwarded to the second router's IP address.  The second router which acts a firewall and 443, 44300, 21, and 80 are all forwarded to the server at 192.168.100.20.

When I connect my other computer to my network I cannot connect to HFS through sTunnel (192.168.100.20:443), but if I forward 44300 and connect to my server on that port (192.168.100.20:44300) I get through just fine, without HTTPS.

Quote
2009.05.14 20:31:51 LOG7[2960:3988]: Snagged 64 random bytes from C:/.rnd
2009.05.14 20:31:51 LOG7[2960:3988]: Wrote 1024 new random bytes to C:/.rnd
2009.05.14 20:31:51 LOG7[2960:3988]: RAND_status claims sufficient entropy for the PRNG
2009.05.14 20:31:51 LOG7[2960:3988]: PRNG seeded successfully
2009.05.14 20:31:51 LOG7[2960:3988]: Certificate: stunnel.pem
2009.05.14 20:31:51 LOG7[2960:3988]: Certificate loaded
2009.05.14 20:31:51 LOG7[2960:3988]: Key file: stunnel.pem
2009.05.14 20:31:51 LOG7[2960:3988]: Private key loaded
2009.05.14 20:31:51 LOG7[2960:3988]: SSL context initialized for service https
2009.05.14 20:31:51 LOG5[2960:3988]: stunnel 4.27 on x86-pc-mingw32-gnu with OpenSSL 0.9.8k 25 Mar 2009
2009.05.14 20:31:51 LOG5[2960:3988]: Threading:WIN32 SSL:ENGINE Sockets:SELECT,IPv6
2009.05.14 20:31:51 LOG5[2960:2276]: No limit detected for the number of clients
2009.05.14 20:31:51 LOG7[2960:2276]: FD 144 in non-blocking mode
2009.05.14 20:31:51 LOG7[2960:2276]: SO_REUSEADDR option set on accept socket
2009.05.14 20:31:51 LOG7[2960:2276]: https bound to 0.0.0.0:443
2009.05.14 20:31:55 LOG7[2960:2276]: https accepted FD=152 from 192.168.100.22:3154
2009.05.14 20:31:55 LOG7[2960:2276]: Creating a new thread
2009.05.14 20:31:55 LOG7[2960:2276]: New thread created
2009.05.14 20:31:55 LOG7[2960:3864]: https started
2009.05.14 20:31:55 LOG7[2960:3864]: FD 152 in non-blocking mode
2009.05.14 20:31:55 LOG7[2960:3864]: TCP_NODELAY option set on local socket
2009.05.14 20:31:55 LOG5[2960:3864]: https accepted connection from 192.168.100.22:3154
2009.05.14 20:31:55 LOG7[2960:3864]: SSL state (accept): before/accept initialization
2009.05.14 20:31:55 LOG3[2960:3864]: SSL_accept: 1407609C: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
2009.05.14 20:31:55 LOG5[2960:3864]: Connection reset: 0 bytes sent to SSL, 0 bytes sent to socket
2009.05.14 20:31:55 LOG7[2960:3864]: https finished (0 left)

I don't get a cert request or anything on 443.  it just times out.

Perhaps someone could email a complete working sTunnel.conf file to me at CapitolCityLAN@GMail.com.  I can change my port forwarding and my HFS setting to make it work, I just cant get it to work in the first place. 

Added Note:  it does work at http://HTTPS://localhost:443

I could really use some help.  Thanks.
« Last Edit: May 15, 2009, 01:42:02 AM by WhereEaglesDare »


Offline WhereEaglesDare

  • Occasional poster
  • *
    • Posts: 17
    • View Profile
 ;D ;D ;D  YAY

Okay Im a moron.  I was using http://HTTP://192.168.100.20 and NOT HTTPS!

Now I get a Certificate Error.  Is this normal?


Offline MarkV

  • Tireless poster
  • ****
    • Posts: 764
    • View Profile
Probably because it is self-signed.
http://worldipv6launch.org - The world is different now.


Offline WhereEaglesDare

  • Occasional poster
  • *
    • Posts: 17
    • View Profile
So, even though I get errors on the certificate if I connect through sTunnel to HFS it is encrypted?   ???  Awesome


Offline MarkV

  • Tireless poster
  • ****
    • Posts: 764
    • View Profile
Exactly. Bought certs from agencies like Verisign have an established certificate chain down to their root certificate, installed on your PC. Of course self-signed certs don't have this chain, hence the error ('ocoured at position 1 in the certificate chain'). As long as people connecting trust you and allow the cert, communication is encrypted.
http://worldipv6launch.org - The world is different now.