Your message dated Tue, 17 May 2016 22:36:41 +0000
with message-id <[email protected]>
and subject line Bug#823229: fixed in sslh 1.18-1
has caused the Debian Bug report #823229,
regarding sslh: --transparent does not allow connections to the service from
the same machine
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
823229: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823229
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sslh
Version: 1.16-2
Severity: important
Tags: upstream
I am running sslh in --transparent mode, and as per the upstream report at
https://github.com/yrutschle/sslh/issues/64
I cannot access services behind sslh from my local machine.
sslh invocation:
# /usr/sbin/sslh -n -f -v --transparent --user sslh --listen
<my-external-ip>:443 --ssh <my-external-ip>:2222 --ssl <my-external-ip>:4443
--pidfile /var/run/sslh/sslh.pid
and then:
$ curl -v https://<hostname-pointing-at-my-external-ip>/
...
* Unknown SSL protocol error in connection to
<hostname-pointing-to-my-external-ip>:443
* Closing connection 0
And the sslh logs:
connecting to <my-external-ip>:4443 family 2 len 16
bind:98:Address already in use
bind_peer:98:Address already in use
connect: Address already in use
Sounds like this is fixed upstream by https://github.com/yrutschle/sslh/pull/69
Would be great to see the fix make it into Debian soon.
-- System Information:
Debian Release: 8.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to
en_GB.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages sslh depends on:
ii adduser 3.113+nmu3
ii debconf 1.5.56
ii init-system-helpers 1.22
ii libc6 2.19-18+deb8u4
ii libcap2 1:2.24-8
ii libconfig9 1.4.9-2
ii libwrap0 7.6.q-25
ii lsb-base 4.1+Debian13+nmu1
ii update-inetd 4.43
Versions of packages sslh recommends:
ii apache2 [httpd] 2.4.10-10+deb8u4
ii apache2-mpm-worker [httpd] 2.4.10-10+deb8u4
ii openssh-server [ssh-server] 1:6.7p1-5+deb8u2
Versions of packages sslh suggests:
ii openbsd-inetd [inet-superserver] 0.20140418-2
-- Configuration Files:
/etc/default/sslh changed [not included]
-- debconf information:
* sslh/inetd_or_standalone: standalone
--- End Message ---
--- Begin Message ---
Source: sslh
Source-Version: 1.18-1
We believe that the bug you reported is fixed in the latest version of
sslh, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guillaume Delacour <[email protected]> (supplier of updated sslh package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 17 May 2016 20:56:14 +0200
Source: sslh
Binary: sslh
Architecture: source amd64
Version: 1.18-1
Distribution: unstable
Urgency: medium
Maintainer: Guillaume Delacour <[email protected]>
Changed-By: Guillaume Delacour <[email protected]>
Description:
sslh - Applicative protocol multiplexer
Closes: 823229
Changes:
sslh (1.18-1) unstable; urgency=medium
.
* New upstream release, include transparent mode local patch from upstream
(Closes: #823229)
* Bump to Standards-Version 3.9.8 (no changes needed)
* Change Vcs-{Browser,Git} to use https instead of http/git
* Set Documentation key to sslh(8) for systemd unit file
Checksums-Sha1:
914068a67b2e3d35a86486046db4921aff415903 1952 sslh_1.18-1.dsc
b2e3a4314f62fc8200ecfbadefebe809a84d8099 53170 sslh_1.18.orig.tar.gz
b1d10a834cde4b5c44a9c723334eb972e2d79958 17268 sslh_1.18-1.debian.tar.xz
931ed2fa8efbf26a3c77f57a1e2d6393d0b29cc1 78428 sslh-dbgsym_1.18-1_amd64.deb
111da56ba9624e501361619f9e065b9bb9164ac1 50846 sslh_1.18-1_amd64.deb
Checksums-Sha256:
f85ce3717370462e6b6be0428f4b7ee6f05d512d2f849b525edfcb8cb3363358 1952
sslh_1.18-1.dsc
1601a5b377dcafc6b47d2fbb8d4d25cceb83053a4adcc5874d501a2d5a7745ad 53170
sslh_1.18.orig.tar.gz
0034af6d3429380752b2b8c11a755a6619e86020c4439b4808690c5d8b2a3177 17268
sslh_1.18-1.debian.tar.xz
d24ca6018e1bc545f153713c2cd5aff93f4e6bb9cf978e44416e1ad7279a2f4e 78428
sslh-dbgsym_1.18-1_amd64.deb
970657cc46454137ef17bd1c3e8b4671df3b54b4ddacbd43a1aa5428f2d952d8 50846
sslh_1.18-1_amd64.deb
Files:
65345018abf39f1bc92b7c85bdb9723f 1952 net extra sslh_1.18-1.dsc
0e3568d5d234516c634d4df156473298 53170 net extra sslh_1.18.orig.tar.gz
9342bcc64619eac5d2ccc27d4b31ceec 17268 net extra sslh_1.18-1.debian.tar.xz
001f2c66bd2a1cd5285509797840b06d 78428 debug extra sslh-dbgsym_1.18-1_amd64.deb
6c1079db9e2db612f5fc3f6f9a8dd2a5 50846 net extra sslh_1.18-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Signed by Ana Guerrero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=pJZg
-----END PGP SIGNATURE-----
--- End Message ---
