Your message dated Sat, 28 Aug 2010 11:58:16 -0700
with message-id <[email protected]>
and subject line Re: Debian Bug #471085: stunnel fails to connect to dual stack
ipv4/ipv6 hosts (fixed upstream)
has caused the Debian Bug report #471085,
regarding stunnel fails to connect to dual stack ipv4/ipv6 hosts
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
471085: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=471085
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: stunnel4
Version: 3:4.21-1
Hi,
i have 2 dual stack systems running uucp over ssl and stunnel fails
to establish a connection when the remote port is reachable only
via ipv4 ..
lifebook:~# telnet hydra.gt.owl.de suucp
Trying 2001:6f8:1173:2::1...
Trying 195.71.99.218...
Connected to hydra.gt.owl.de.
Escape character is '^]'.
^]close
telnet> close
Connection closed.
lifebook:~# stunnel -c -r hydra.gt.owl.de:4013
lifebook:~#
Mar 15 20:29:48 lifebook stunnel: LOG5[5237:3082983088]: stunnel 4.21 on
i486-pc-linux-gnu with OpenSSL 0.9.8g 19 Oct 2007
Mar 15 20:29:48 lifebook stunnel: LOG5[5237:3082983088]: Threading:PTHREAD
SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
Mar 15 20:29:48 lifebook stunnel: LOG3[5237:3082983088]: connect_wait:
getsockopt: Connection refused (111)
Mar 15 20:29:48 lifebook stunnel: LOG5[5237:3082983088]: Connection reset: 0
bytes sent to SSL, 0 bytes sent to socket
So i would say not trying ipv4 regardless of the error the ipv6
connection brought is a bug.
Another wishlist part would be to log which address actually failed
the connection in the syslog. Currently there is no way to determin
the failing endpoint.
Flo
--
Florian Lohoff [email protected] +49-171-2280134
Those who would give up a little freedom to get a little
security shall soon have neither - Benjamin Franklin
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Version: 3:4.27-1
> This bug was fixed upstream in version 4.27. Stunnel now tries to connect
> all IP addresses returned by the resolver.
> ...
> Best regards,
> Michal Trojnara
> upstream maintainer
The Debian package failed to mention this in its changelog, thus
closing by hand.
--
Rodrigo Gallardo
--- End Message ---
