[stunnel-users] Re: Inbound and outbound connection on same PC?

2023-06-14 Thread Javier
On Wed, 14 Jun 2023 07:04:22 +0200 d3rIIIe15ter Tier wrote: > Thanks Javier - one difference below in red: - does that change > things? > > [...] > > Linux PC connects to server using an Stunnel client service > Linux PC acts as an SQL server creating a secure connect

[stunnel-users] Re: Inbound and outbound connection on same PC?

2023-06-13 Thread Javier
On Tue, 13 Jun 2023 04:25:11 - trashra...@gmail.com wrote: > 3. What is the correct route I should take? Server offering secure connection ^ | Linux PC connects to server using an Stunnel client service Linux PC acts as an SQL server creating a secure connection with an Stunnel s

[stunnel-users] Re: blat, stunnel, and gmail with an app password

2023-02-15 Thread Javier
Hi, > I see when I set up this computer to with blat-stunnel-gmail, that > I ran a line with blat.exe to store the gmail password. I don't > see a way to store an app password, but blat is old. App password == normal password Google is requesting to use, instead your account password, a generat

[stunnel-users] Re: Stunnel Consulting

2022-09-09 Thread Javier
On Fri, 9 Sep 2022 18:30:58 + Gary Jackson wrote: > I am looking for someone to assist with an stunnel configuration on > windows that will accept TLS1.2 connections and then send them > unencrypted to an IP and port. I would need to get it working > within the next week or so and am availab

[stunnel-users] Re: recent Problem sending email via Blat

2022-05-25 Thread Javier
On Wed, 25 May 2022 16:44:35 + Phillip Parker wrote: > [ssmtp] > accept = 127.0.0.1:25 > connect = smtp.live.com:587 Hi, it is already long ago that the smtp server for Hotmail and Outlook accounts/mail service stopped being smtp.live.com and became smtp-mail.outlook.com: https://support.m

[stunnel-users] Re: [SPAM] Is stunnel really compliant with RFC 2487 / RFC 3207 ?

2022-05-12 Thread Javier
On Thu, 12 May 2022 09:18:19 + (UTC) Mike Spooner wrote: > Is there anyone else on the list wanting to use stunnel for MX-MX > communication? Hi, probably not, just me ;) I just made an assumption and now all is clear :) Regards. ___ stunnel-

[stunnel-users] Re: Is stunnel really compliant with RFC 2487 / RFC 3207 ?

2022-05-12 Thread Javier
On Thu, 12 May 2022 05:23:07 + (UTC) Micha__ Trojnara via stunnel-users wrote: > Hi Javier, > > stunnel is an encryption tool, and *not* a MUA/MTA, Hi Micha__, I haven't said that it is any kind of mail sever. I know is just the tool to encrypt the traffic, after years

[stunnel-users] Is stunnel really compliant with RFC 2487 / RFC 3207 ?

2022-05-11 Thread Javier
Hi, first of all, I still use a 32-bit release (the latest, I think), so maybe things have changed on Stunnel since. But the statement that the protocol smtp option for a service is compliant with RFC 2487, should be 3207 (it is from 2002!), has been in the docs for ages, even in the latest versi

[stunnel-users] Re: Office 365 connections stopped working

2021-11-25 Thread Javier
On Fri, 26 Nov 2021 02:57:56 +0100 Javier wrote: > Michal, at the time of writting this, the web interface for the > mailing lists gives a not found error. That is not true. Is working, sorry, I just re-sent, a month later, without further e

[stunnel-users] Re: Office 365 connections stopped working

2021-11-25 Thread Javier
Michal, at the time of writting this, the web interface for the mailing lists gives a not found error. On Tue, 26 Oct 2021 15:13:22 + (UTC) Mike Spooner wrote: > The fact that the log mentions an SSLv3 connection attempt, rather > than something more modern, might well indicate what you sus

[stunnel-users] Re: Disguising HTTP 503 services unavailable

2021-09-17 Thread Javier
On Fri, 17 Sep 2021 11:32:01 +0900 Haruka Takagi wrote: > Thank you for your reply. > > I meant 503 service unavailable response to stunnel client's CONNECT > request, not to original sender's GET or POST request. I hope that > stunnel clients retry CONNECT after 503. > > I tried "retry = yes" co

[stunnel-users] Re: How to resolve DNS by stunnel?

2021-09-14 Thread Javier
On Tue, 14 Sep 2021 04:25:21 - sh...@smart-cast.co.jp wrote: > Hi, I'm facing DNS issues when connecting to a server using a > dynamic IP address. I think stunnel refers to DNS at startup, so if > the IP address changes in the middle, it will get a connection > error. Can this be resolved with

[stunnel-users] Re: Unexpected socket close while sending mail

2021-07-26 Thread Javier
On Thu, 22 Jul 2021 15:35:56 - zf...@gmx.de wrote: > But as soon I want to send a mail my mail program tries for > 10-15s to send an then gives up. > > [...] > > protocol = smtp > > [...] > > I get exactly the same problem with Mac OS 10.9 and Thunderbird as > email client. The above post was

[stunnel-users] Re: Questions about two host connection using stunnel

2021-04-24 Thread Javier
On Sat, 24 Apr 2021 03:08:48 - yf...@seas.upenn.edu wrote: > Thanks for your help Javier. Your instructions really help me > building the simple stunnel. > > I am wondering whether it is possible to build a bi-directional > stunnel. Hi, in every connection there is already a

[stunnel-users] Re: Questions about two host connection using stunnel

2021-04-22 Thread Javier
On Thu, 22 Apr 2021 23:15:19 - yf...@seas.upenn.edu wrote: > Also, I am kind of confused how to run stunnel between server and > client. Hi, App connects to port 123 ---> plain text ---> Stunnel *client* *accepts* on port 123 ---> *connects* to port 456 ---> encrypted traffic ---> Stunnel *s

[stunnel-users] Re: Seeing Message in Plain Text in Wireshark

2021-01-27 Thread Javier
Sorry, I replied to your address instead my mistake :S On Wed, 27 Jan 2021 21:11:53 + David Brower wrote: > I updated the TCP client to send the message to port 13001 but when > I check Wireshark I can still see the contents of the message in > plaintext. Shouldn't I no longer be able to se

[stunnel-users] Re: Can't Connect To Gmail

2020-10-17 Thread Javier
Hi, Except for verification, that it always has been a pain unless you control de CA and the peers with certificate that connect to you, and so I haven't set them as you, it works for me. Also I force TLS 1.2, but it is unnecessary as Google already negotiates 1.2 if you remove that from the conf

Re: [stunnel-users] Need help connecting Eudora to mail servers

2020-05-27 Thread Javier
On Wed, 27 May 2020 11:58:21 -0400 "Phil Smith III" wrote: > Eudora error (Personality is named just "y" since it's just a test): > -- > y, Logging into POP Server, PASS [11:33:29 AM] > There has been an error transferring your mail. I said: PASS > and then the POP server > (y_phsiii@127.0.0.1)

Re: [stunnel-users] Need help connecting Eudora to mail servers

2020-05-26 Thread Javier
On Tue, 26 May 2020 10:35:13 -0400 "Phil Smith III" wrote: > Well, for what it's worth, I tried and also couldn't get this to > work. I stand by my supposition that it's because Yahoo implemented > SPA > and Eudora doesn't do that.

Re: [stunnel-users] Windows Server 2003 issues with stunnel, TLS 1.2 on website(s)

2020-02-26 Thread Javier
On Thu, 27 Feb 2020 00:12:28 +0100 Javier wrote: > Public IP:443 > Stunnel keep listening on (ie: 10.0.1.110)442 > (NAPTed) and redirecto to ISS(10.0.1.11):80 Oops, a little typo. Where it says (ie: 10.0.1.110)442 should say (ie: 10.0.1.110)443. In that second example, it is if y

Re: [stunnel-users] Windows Server 2003 issues with stunnel, TLS 1.2 on website(s)

2020-02-26 Thread Javier
Hi, You just need to forget about IIS secure port as it won't be used anymore and it will be managed by Stunnel and redirect to port 80. Or you can go the other way around; setup a second IP to the network device and NAT to it (I'm guessing is what you are doing through a router) instead the IP t

Re: [stunnel-users] feature ? authorizing only given certificates ?

2019-07-10 Thread Javier
On Wed, 10 Jul 2019 16:01:31 + (UTC) "fmgre-d...@yahoo.fr" wrote: > Hello > My european organization is using a certificate chain which signs tens of > thousands of user certificates. > My local organization counts 300 users ...  and i only want these 300 to get > in the IT system. > I'd li

Re: [stunnel-users] Latest Stunnel for Windows XP

2019-06-24 Thread Javier
On Mon, 24 Jun 2019 19:21:26 + David Yunker wrote: > To whom it may concern, > > What was the last version of stunnel that worked on Windows XP? > > Thanks for the info. Hi, the latest (should, as didn't test) while XP is in 64-bit, otherwise, if it is 32-bit XP, 5.49. Regards. __

Re: [stunnel-users] No more addresses to connect

2019-01-08 Thread Javier
Hi, That error happens when there aren't more connect options in the service section and it isn't unable to connect to that/those destination/s. In other words, for whatever reason it can't connect to that IP. That is a common error if you block outbounds connections in your firewall. Regards.

Re: [stunnel-users] older browsers, stunnel and privoxy

2018-12-21 Thread Javier
On Fri, 21 Dec 2018 13:58:35 +0200 Peter Pentchev wrote: > Hm, there's no reason why stunnel would not work like that for > a predetermined set of hosts with known addresses. Hi, I'm just trying to avoid encouraging him on keep with his first idea of browsing through Stunnel, with, or without p

Re: [stunnel-users] older browsers, stunnel and privoxy

2018-12-20 Thread Javier
On Fri, 21 Dec 2018 00:01:08 +0100 kovacs janos wrote: > okay, so that means i should be able to connect to a website's server > with only stunnel, and only its client side, even if i have to specify > the destination IP of the server? i tried that and didnt seem to work > either. i wrote the web

Re: [stunnel-users] older browsers, stunnel and privoxy

2018-12-20 Thread Javier
On Thu, 20 Dec 2018 14:18:10 +0100 kovacs janos wrote: > thank you for the explanation, but if a proxy cant read the traffic > encrypted by stunnel, that means even if the set of possible hostnames > are given, the destination server could not read the request unless > there is another stunnel in

Re: [stunnel-users] older browsers, stunnel and privoxy

2018-12-15 Thread Javier
On Sat, 15 Dec 2018 21:54:33 +0100 kovacs janos wrote: > "Because the proxy is to be told where to connect and receives a > direct secure handshake." > > is that necessary even if stunnel is told to not verify the connections? > ''If no verify argument is given, then stunnel will ignore any > ce

Re: [stunnel-users] older browsers, stunnel and privoxy

2018-12-13 Thread Javier
On Thu, 13 Dec 2018 21:03:27 +0100 kovacs janos wrote: > i understand, and thank you for the explanation, but as i said, i use > a program called 'Privoxy', and that is where stunnel would connect > after accepting browser requests. Privoxy's accept address is what is > given for stunnel as the c

Re: [stunnel-users] older browsers, stunnel and privoxy

2018-12-13 Thread Javier
Hi, You are getting around and around and you don't get it. Yes, stunnel, after all, is a proxy, as acts as an intermediate (end of proxy definition), but is not a proxy as you understand it. While all proxy servers act as a funnel (wide side accepts inbound connections and tight for outbound co

Re: [stunnel-users] [EXTERNAL] Re: Stunnel connection issue?

2018-07-09 Thread Javier
On Mon, 9 Jul 2018 12:26:08 + Daniel Trickett wrote: > > Will, > > I was told to ignore the SSLv3 stuff in the log. I have options set > to allow only TLS1.2 and still see SSLv3 references in the log. > > Best regards, > > Dan Hi, in fact, the version can be disclosed from following li

Re: [stunnel-users] question regarding TLS connection.

2018-06-26 Thread Javier
Hi, the SSLv3 doesn't mean nothing in the log. Should represent the actual secure protocol version? True, but that doesn't mean it could be actually using TLSvXXX. Regards. ___ stunnel-users mailing list stunnel-users@stunnel.org https://www.stunnel.or

Re: [stunnel-users] stunnel 5.47 released

2018-06-23 Thread Javier
On Sat, 23 Jun 2018 08:10:21 +0200 Michal Trojnara wrote: > * Bugfixes > - Fixed a crash on switching to SNI slave sections. Hi, Looks like it got fixed ;) Thanks to the other users for the help in confirming. Regards. ___ stunnel-users mailing l

[stunnel-users] Stunnel 5.45 and 5.46 crashes upon reconnect HTTPS

2018-06-21 Thread Javier
Hi, isn't annoying when you are using an old version, 5.44, and all goes fine, you notice you are outdated and then comes the problems after update? :-P The thing is that yesterday I needed the HTTPS server so I run Stunnel 5.44 for my non-SSL app and all was fine. I updated to 5.46 just because

Re: [stunnel-users] proxy with authentication

2018-04-03 Thread Javier
Why would he use the protocol option, when is for HTTP when... ? > to overcome a proxy server which allows only http and https Or I totally misunderstood, but my guess was that he was trying to use other kind of service through the proxy server. I guess, now, that I totally misunderstood. No c

Re: [stunnel-users] proxy with authentication

2018-04-03 Thread Javier
Hi, If your network is set up to pass all traffic through a proxy, without a gateway set on clients, you won't be able to use anything that the proxy server isn't configured for. Have in mind, anyway, that Stunnel doesn't act as a proxy and the purpose isn't to connect dinamically to different en

Re: [stunnel-users] Possible memory leak with stunnel reload

2018-04-03 Thread Javier
Hi, I confirm it using 5.44. In my case in fact is 200KB, but as I have a big stunnel.conf file with quite a few client services ;), hence, the difference. Should be fixed, but, in the other hand... why continuous reloading? I reload when I make changes and that happens from never to less than

Re: [stunnel-users] stunnel 5.39 released

2017-01-03 Thread Javier
On Sun, 1 Jan 2017 23:43:31 +0100 Michał Trojnara wrote: > * New features > - PKCS#11 engine (pkcs11.dll) added to the Win32 build. Hi, You are going to forgive me, but, wasn't this already included? It surprised to me that the 31st of December was asked in the list and now you include it

Re: [stunnel-users] stunnel 5.38 released

2016-12-01 Thread Javier
On Thu, 1 Dec 2016 16:09:13 +0100 Małgorzata Olszówka wrote: > Hello, > > Thank you for your testing effort and for your feedback. > Could you try to update stunnel to the latest 5.39 beta version. > The GUI works there better and reloads stunnel with the custom .conf > even if it is not loaded

Re: [stunnel-users] stunnel 5.38 released

2016-11-30 Thread Javier
On Wed, 30 Nov 2016 09:36:39 +0100 Małgorzata Olszówka wrote: > Hello Javier, > I tried to replicate this bug, but I couldn't. Could you show me your > activities step-by-step? The log messages can be also helpful. Hi, just as I explained. There isn't any mistery ;) This t

Re: [stunnel-users] stunnel 5.38 released

2016-11-26 Thread Javier
Hi there. Dumb error I just found. Dumb because I just found it and maybe it was earlier among us. Or maybe it is "a feature". But I'd swear it worked as expected in the past. Testing the new SNI option I made a mistake and I had to edit and reload the configuration file. Nothing strange until he

Re: [stunnel-users] Broadband and stunnel weird behavior

2016-06-23 Thread Javier
On Tue, 14 Jun 2016 12:04:10 +0200 Małgorzata Olszówka wrote: > Javier, > What version of stunnel have you got? > The latest version of stunnel will be probably released in the next > week. This small problem with the speed which you noticed will be > solved, I hope. > I lo

[stunnel-users] Broadband and stunnel weird behavior

2016-06-04 Thread Javier
Hi, I was in doubt if post this or not because I couldn't replicate with enough similarities. But as it may be worth, if it is an actual bug, or help others... why not? Here I have to say that it is more noticeable under Windows 2000. That doesn’t mean doesn’t happen on higher OSs, but, from XP,

Re: [stunnel-users] New Windows installer

2015-08-19 Thread Javier
On Wed, 19 Aug 2015 10:09:37 +0200 Michal Trojnara wrote: > On 19.08.2015 00:19, Javier wrote: > > This is becuse since a few versions I extract the files from the > > installer, as it is not strictly needed to run stunnel, so I can't > > report anything about the i

Re: [stunnel-users] New Windows installer

2015-08-18 Thread Javier
On Fri, 14 Aug 2015 19:11:09 +0200 Michal Trojnara wrote: > Dear Users, > > I have performed a major rewrite of the stunnel installer for Windows. > It now allows installing stunnel for all users (as before), and also for > the current user (in the user's home directory). > It also no longer ins

Re: [stunnel-users] stunnel 5.18 may keep high CPU usage

2015-06-17 Thread Javier
On Tue, 16 Jun 2015 16:40:53 +0200 Michal Trojnara wrote: > On 14.06.2015 21:13, Javier wrote: > > An user option maybe, to set fixed or random, but random by > > default? Just an idea. > > This is how it's implemented. You can add your own (fixed) DH > parameters

Re: [stunnel-users] stunnel 5.18 may keep high CPU usage

2015-06-14 Thread Javier
On 14/06/15, you wrote in gmane.network.stunnel.user: > I appreciate your opinions. Do you think I should trade security > for 20 minutes idle CPU time every 24 hours? > On modern machines it's closer to 2 minutes... > Mike Hi, No, of course not. I understood that you did this for security rea

Re: [stunnel-users] stunnel 5.18 may keep high CPU usage

2015-06-14 Thread Javier
On Sun, 14 Jun 2015 06:59:52 +0200 Michal Trojnara wrote: > After 1 minute of running stunnel running in server mode starts > computing new DH parameters. This usually takes a few minutes > depending on your hardware. The process is repeated every 24 hours. > Hi, depending on your hardware,

Re: [stunnel-users] stunnel 5.11 released

2015-03-11 Thread Javier
On Wed, 11 Mar 2015 22:15:30 +0100 Michal Trojnara wrote: > I found two workarounds: > > 1. Force TLSv1 handshake: > sslVersion = TLSv1 > > 2. Enable FIPS mode: > fips = yes > > Mike Hi, Thanks for the help. I went for the first and it is working :-) From the ignorance, looks l

Re: [stunnel-users] stunnel 5.11 released

2015-03-11 Thread Javier
Hi, This version can't connect to Hotmail/Live/Outlook POP3 with the same configuration as 5.10. Under Windows 2000, but happens in XP too. LOG3[1220]: SSL_connect: Peer suddenly disconnected LOG5[1220]: Connection reset: 0 byte(s) sent to SSL, 0 byte(s) sent to socket Configuration. The bottom

Re: [stunnel-users] Blue Iris

2015-01-22 Thread Javier
On Thu, 22 Jan 2015 13:13:12 -0500 Patrick wickline wrote: > I have stunnel set up on my machine. It works locally and lets me connect > to my Blue Iris server with https. > > However, I am unable to do this remotely. I have forwarded the port in my > router to stunnel, from stunnel to blue iris

Re: [stunnel-users] No DNS lookup?

2015-01-21 Thread Javier
Hi, As Ludof said, you may be trying to connect to a virtual web server and, or it is a very basic web server, or has some misconfiguration, because I use myself an old tiny web server that handles virtual severs without any problems. Make sure your web server can read the "Host" HTTP header, and

Re: [stunnel-users] Window not updating (win32 5.05)

2014-10-15 Thread Javier
On Wed, 15 Oct 2014 22:53:16 +0200 Michal Trojnara wrote: > Javier wrote: > > just reporting that with the latest version the window doesn't get > > updated when there is activity. It is static. > > > > You have to minimize to tray and restore again to view th

[stunnel-users] Window not updating (win32 5.05)

2014-10-15 Thread Javier
Hi, just reporting that with the latest version the window doesn't get updated when there is activity. It is static. You have to minimize to tray and restore again to view the activity, what, almost, is actually as fast as have a look to the log :/ Can anyone confirm? Regards. P.S.: happening

Re: [stunnel-users] No Taskbar Icon

2014-09-26 Thread Javier
On Thu, 25 Sep 2014 20:40:33 +0200 Michal Trojnara wrote: > Javier wrote: > > But, anyway, as I don't usually use Stunnel as service, I dig a > > little more, and it isn't attached _on boot_ to the taskbar on > > previous Windows versions either. > > At

Re: [stunnel-users] No Taskbar Icon

2014-09-25 Thread Javier
On Thu, 25 Sep 2014 15:26:55 +0200 Michal Trojnara wrote: > The proper solution is to move the GUI to a separate process. > - Network server running as an NT service or a user process. > - GUI client always running as the current user. Hi, Yes, that's the point. But, anyway, as I don't usual

Re: [stunnel-users] No Taskbar Icon

2014-09-24 Thread Javier
On Wed, 24 Sep 2014 20:10:58 +0200 Pierre DELAAGE wrote: > Ok, this is a fact that a service should not have to interact with the > desktop, and the icon is a part of that... > It is normal, in stunnel case, that it does not appear: if it were the > case it may allow the user to stop the servic

[stunnel-users] OpenSSL dlls update for Windows (security advisory 20140605)

2014-06-07 Thread Javier
Hi, as a mere user I ask, should we expect a new Stunnel version in a few days even it is not an Stunnel vulnerability or is it enough to just update ssleay and libeay with 1.0.1h by us under Windows? Just in case ssleay and libeay are compiled different than official builds. Regards. http://ww

Re: [stunnel-users] Syringe

2014-04-21 Thread Javier
On Mon, 21 Apr 2014 09:14:40 +0200 Michal Trojnara wrote: > Hi Guys, > > I'm glad to announce syringe, a service for testing client-side heartbleed. > It allows to easily examine most of the obscure TLS clients (for example > embedded devices). > The service is available online at https://www.st

Re: [stunnel-users] stunnel 5.00 released

2014-03-09 Thread Javier
Hi, I missed another entry in log. The last line looks like an error. No limit detected for the number of clients stunnel 5.00 on x86-pc-msvc-1500 platform Compiled/running with OpenSSL 1.0.1f-fips 6 Jan 2014 Threading:WIN32 Sockets:SELECT,IPv4 SSL:ENGINE,OCSP,FIPS errno: (*_errno())

Re: [stunnel-users] stunnel 5.00 released

2014-03-09 Thread Javier
On Thu, 06 Mar 2014 01:09:31 +0100 Michal Trojnara wrote: > - On Win32 platform .rnd file moved from c:\ to the stunnel folder. Hi, System Windows 2000. Refering to the above, I still can see this in the log, and the file that already exists in c:\ from a year back is being used and modified

Re: [stunnel-users] Filename is not cached for later editing

2014-01-24 Thread Javier
On Fri, 24 Jan 2014 20:34:10 +0100 Michal Trojnara wrote: > On 2014-01-24 00:32, Javier wrote: > > The important thing is to edit the correct file :-) > Why don't you just merge all your configuration files into a single one? Hi, I do. I was just testing and I found that prob

Re: [stunnel-users] Filename is not cached for later editing

2014-01-23 Thread Javier
On Thu, 23 Jan 2014 21:33:34 +0100 Michal Trojnara wrote: > > Also, this is not important, because in most cases is used the default > > file name, but maybe could be implemented the ability to change those > > menu options to display the current configuration file name used > > instead the stand

[stunnel-users] Filename is not cached for later editing

2014-01-23 Thread Javier
Hi, Scenario in Windows. I found today that, when you specify a configuration file different from the standard file name, you can't edit it through "Configuration>Edit stunnel.conf". Stunnel tries to edit stunnel.conf, and, if not found, creates a new one through notepad. This doesn't affect to

Re: [stunnel-users] error invalid stunnel.conf - No limit of clients

2013-12-09 Thread Javier
On Mon, 09 Dec 2013 09:35:49 +0100 Michal Trojnara wrote: > On 12/08/2013 04:16 AM, Javier wrote: > > The problem is that "client = yes" is not a global option anymore. > > > > The default is "client = no" for any service unless yes is specified. > &

Re: [stunnel-users] error invalid stunnel.conf - No limit of clients

2013-12-07 Thread Javier
Hi, The problem is that "client = yes" is not a global option anymore. The default is "client = no" for any service unless yes is specified. So tries to load the services in server mode and fails because there are faulty parameters to set a server. You could see better the error with "debug = 7

Re: [stunnel-users] stunnel domain name resolution bug

2013-12-06 Thread Javier
Hi, Add "delay = yes", without quotes, globally or per-service (on client stunnel). It's enough. You only need to have in mind that the dynamic DNS provider do its best but all depends on the whole DNS network, so, even setting this on stunnel client service, are needed about 1, 2, 3 minutes, or

[stunnel-users] Weird tunneling eMule's web interface

2013-11-16 Thread Javier
Hi there, lets see: When I setup a server for the eMule's web interface and I access with the browser through https, the result is that the web interface never fully loads. When I setup a server for the web interface and a client connecting to that server and I access with the browser through htt

Re: [stunnel-users] Difference between verify=2, 3 and 4

2013-09-19 Thread Javier
On Thu, 19 Sep 2013 21:05:44 +0200 Michal Trojnara wrote: > On 2013-09-17 01:17, Javier wrote: > > I didn't use level 4, but if I'm not wrong, it doesn't check for a local > > certificate > > but just the top CA, without the full CAs chain (all CAs part of

Re: [stunnel-users] Difference between verify=2, 3 and 4

2013-09-16 Thread Javier
On Fri, 13 Sep 2013 22:55:14 -0700 Nikolaus Rath wrote: > Hello, > > Thanks for writing stunnel, it looks like a great tool! > > I have, however, a really hard time understanding the difference between > verify=2,3 and 4. In the manpage, I found > >verify = level >verify pe

Re: [stunnel-users] Sending Email Without Authentication with gmail

2013-06-28 Thread Javier
On Fri, 28 Jun 2013 09:07:22 -0500 "Stephen Gates" wrote: > I downloaded the old argosoft freeware and it works! Praise God! Hi, Nice to read that :) Just to clear it, about your previous message, the static IP I meant is the provided by your ISP. The known as public IP asigned to your route

Re: [stunnel-users] Sending Email from PLC Without Authentication with gmail

2013-06-27 Thread Javier
On Thu, 27 Jun 2013 08:07:52 -0500 "Stephen Gates" wrote: > Thanks for your help Leandro. Do you have a suggestion for a SMTP Relay?? I > have tried Free SMTP Server which was the only thing that has worked so far > and worked almost perfectly except that it can only send out 10 emails a > day.

Re: [stunnel-users] certificate verify failed

2013-06-19 Thread Javier
Hi, Looks like you have verify = 3 (verify peer certificate with locally file) and can't find the peer certificate to verify against. Are you sure that the CAfile contains the peer certificate too, not only the CAs? If you use verify = 2 (it just verify the certificate against CA) and doesn't

Re: [stunnel-users] stunnel RHEL 6.3 and HTTPS header fields

2013-06-16 Thread Javier
Hi, As it must be sent by the browser, comes to my mind to set in the hosts file a line like: 127.0.0.1 hostname.somewhere.abc And replace in stunnel service configuration the connect = hostname.somewhere.abc:443 for connect = IP of hostname.somewhere.abc:443 (hostname.somewhere.abc now points