Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Dod]

Hello Fastream,

FT> Ok, is there any way to compile ICS/BCB2009 code for Linux?
FT> I had enabled WSocket::keepalive for the timeout problem!

You should add a setting to specify timeout delay.

I  suggest  you  to  read  stunnel  help page to see what kind of conf
parameters  it  provide,  may be you could implement some of them that
can  also  be  usefull  (they  have multiple kind of TIMEOUT setup for
example that may tune up some delay problems).

But  I  explained  myself  bad  about  my  stunnel problem. The client
connect  to  stunnel but nothing happend until some timeout happend, I
don't  know who decide to drop the cnx and why stunnel do not proceed,
may be because it also get timeout from stunnel->gmail connection side,
this is what I must investigate.

Talking commercial I think you may provide the client part for free so
users  can  use/discover it in conjuction with any SSL server and then
see that you also have a strong Windows SSL server product to sell.

Regards.

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Fastream Technologies]

Ok, is there any way to compile ICS/BCB2009 code for Linux?
I had enabled WSocket::keepalive for the timeout problem!

Best Regards,

SZ

On Thu, Nov 27, 2008 at 5:54 PM, Dod <[EMAIL PROTECTED]> wrote:

> Hello,
>
> FT> Ok I see how you view it. I had read that MS had great plans for
> Windows
> FT> 2008 as a server OS. How do you guys evaluate it? Do you think Linux
> TCP/IP
> FT> is superior or is it just people preferring Linux because it's free?
>
> Linux is free that's true, but it is also prefered for firewall/ssl/ssh
> "blackbox" solutions.
>
> FT> Also, Dod, you mentioned stunnel being unstable. What other free
> solutions
> FT> do you have experience with? How do they compare to our ICS-based
> solution?
>
> I have not tested the other solutions from Kiwi or Barracuda.
>
> The  main  problem I have with stunnel is that sometime the connection
> between  client  and  stunnel  goes into timeout and then I must retry
> multiple  times  until  stunnel  accept  the  conneciton or stop/start
> stunnel  service.  I  have not yet investigated about this problem and
> found  a workaround by scheduling an stunnel service's stop/start each
> hour (for POP3 usage it's not a problem).
>
> But  this is a personnal experience, I am not SSL or stunnel expert at
> all.
>
> regards.
>
> --
> To unsubscribe or change your settings for TWSocket mailing list
> please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
> Visit our website at http://www.overbyte.be
>
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Dod]

Hello,

FT> Ok I see how you view it. I had read that MS had great plans for Windows
FT> 2008 as a server OS. How do you guys evaluate it? Do you think Linux TCP/IP
FT> is superior or is it just people preferring Linux because it's free?

Linux is free that's true, but it is also prefered for firewall/ssl/ssh
"blackbox" solutions.

FT> Also, Dod, you mentioned stunnel being unstable. What other free solutions
FT> do you have experience with? How do they compare to our ICS-based solution?

I have not tested the other solutions from Kiwi or Barracuda.

The  main  problem I have with stunnel is that sometime the connection
between  client  and  stunnel  goes into timeout and then I must retry
multiple  times  until  stunnel  accept  the  conneciton or stop/start
stunnel  service.  I  have not yet investigated about this problem and
found  a workaround by scheduling an stunnel service's stop/start each
hour (for POP3 usage it's not a problem).

But  this is a personnal experience, I am not SSL or stunnel expert at
all.

regards.

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Fastream Technologies]

Ok I see how you view it. I had read that MS had great plans for Windows
2008 as a server OS. How do you guys evaluate it? Do you think Linux TCP/IP
is superior or is it just people preferring Linux because it's free?
Also, Dod, you mentioned stunnel being unstable. What other free solutions
do you have experience with? How do they compare to our ICS-based solution?

Best Regards,

SZ
On Thu, Nov 27, 2008 at 5:10 PM, Dod <[EMAIL PROTECTED]> wrote:

> Hello Fastream,
>
> I  don't  know  ... there are already many free SSL proxy solution.
>
> Supporting 10k connections may be interesting for hudge networks but I
> think  that  people  will  prefer  Linux based solution that do it for
> free.
>
> regards.
>
> FT> Would you pay $20 for this product? If you need it, how much would you
> pay
> for SSL->>TCP tunnel proxy with 10k connections support? What about $400
> for
> FT> a site license?
> FT> Best Regards,
>
> FT> SZ
>  FT> On Thu, Nov 27, 2008 at 4:07 PM, Dod <[EMAIL PROTECTED]> wrote:
>
> >> Hello Fastream,
> >>
> >> For now it is stable, no crash, I check gmail each 5 mins, 227MB
> >> transfered today at the time I write this mail.
> >>
> >> I will definitly abandon stunnel ;-)
> >>
> >> regards.
> >>
> >>
> >> FT> Please let me know of result of the test.
> >>
> >> FT> THANKS!
> >>
> >> FT> SZ
> >>
> >> FT> On Wed, Nov 26, 2008 at 5:47 PM, Fastream Technologies
> >> FT> <[EMAIL PROTECTED]>wrote:
> >>
> >> >> Hello Dod,
> >> >>
> >> >> I think the TrustedCAPath.pem that comes with ICS does not cover the
> >> root
> >> >> cert that signed mail.google.com.
> >> >>
> >> >> PLEASE do test the code against as much stress as possible. It is
> called
> >> a
> >> >> beta because the server module is not ready yet. I mean the SSL->TCP
> >> >> convertor proxy.
> >> >>
> >> >> Best Regards,
> >> >>
> >> >> SZ
> >> >>
> >> >>   On Wed, Nov 26, 2008 at 5:29 PM, Dod <[EMAIL PROTECTED]> wrote:
> >> >>
> >> >>> Hello Fastream,
> >> >>>
> >> >>> I  have  checked  the  SSL/TLS  checkbox  (no certificate choosed)
> and
> >> >>> unchecked  "verify  peer"  and now it works on gmail I tested a few
> MB
> >> >>> transfert, it's ok and performances seems same as stunnel on my
> little
> >> >>> PIII-1Ghz. If I check both SSL/TLS and Verify Peer, it do not work.
> >> >>>
> >> >>> I  can  let  it  run  permanently  if  you want me to test, this
> gmail
> >> >>> account  receive  about  200MB of IP camera video movie files each
> day
> >> >>> (more or less 1.2MB each file).
> >> >>>
> >> >>> I  will  tell  you  if  it  is more stable than stunnel that I need
> to
> >> >>> restart multiple times a day.
> >> >>>
> >> >>> regards.
> >> >>>
> >> >>> FT> Thanks for your effort. For the SSL part, this is purely ICS so
> I
> >> >>> wonder
> >> >>> FT> where the bug could be--in the component or app?
> >> >>>
> >> >>> FT> There is a demo called "sslsimpletcpclient" or similar in ICSv7.
> >> Does
> >> >>> that
> >> >>> FT> work there?
> >> >>>
> >> >>> FT> Can you tell me a step by step lead to the problem including
> host
> >> >>> addresses.
> >> >>> FT> And yes I have a gmail account.
> >> >>> FT> Regards,
> >> >>>
> >> >>> FT> SZ
> >> >>> FT> On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:
> >> >>>
> >> >>> >> Hello Fastream,
> >> >>> >>
> >> >>> >> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel
> >> ...do
> >> >>> >> not  work, it connect, I see some data exchange in SSL
> negotiation
> >> but
> >> >>> >> no POP3 welcome banner.
> >> >>> >>
> >> >>> >> regards.
> >> >>> >>
> >> >>> >> FT> We are developing an alternative "secure tunneling software".
> >> >>> Meanwhile
> >> >>> >> the
> >> >>> >> FT> client side is ready. It is based on Wilfried's excellent
> >> Socketspy
> >> >>> yet
> >> >>> >> much
> >> >>> >> FT> enhanced and supports SSL on the outgoing part. It uses
> single
> >> >>> threaded
> >> >>> >> FT> architecture with async ICS sockets. Performance exceeds
> 500Mbps
> >> on
> >> >>> my
> >> >>> >> dual
> >> >>> >> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta
> is
> >> 50
> >> >>> >> concurrent
> >> >>> >> FT> connections. SSL part supports client certificates. Could
> yoiu
> >> guys
> >> >>> >> have a
> >> >>> >> FT> look at it and let me know?:
> >> >>> >>
> >> >>> >> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
> >> >>> >>
> >> >>> >> FT> (includes openssl dlls)
> >> >>> >>
> >> >>> >> FT> Best Regards,
> >> >>> >> FT> SZ
> >> >>> >>
> >> >>>
> >> >>>
> >>
> >> --
> >>
>
>  --
>
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Dod]

Hello Fastream,

I  don't  know  ... there are already many free SSL proxy solution.

Supporting 10k connections may be interesting for hudge networks but I
think  that  people  will  prefer  Linux based solution that do it for
free.

regards.

FT> Would you pay $20 for this product? If you need it, how much would you pay
for SSL->>TCP tunnel proxy with 10k connections support? What about $400 for
FT> a site license?
FT> Best Regards,

FT> SZ
FT> On Thu, Nov 27, 2008 at 4:07 PM, Dod <[EMAIL PROTECTED]> wrote:

>> Hello Fastream,
>>
>> For now it is stable, no crash, I check gmail each 5 mins, 227MB
>> transfered today at the time I write this mail.
>>
>> I will definitly abandon stunnel ;-)
>>
>> regards.
>>
>>
>> FT> Please let me know of result of the test.
>>
>> FT> THANKS!
>>
>> FT> SZ
>>
>> FT> On Wed, Nov 26, 2008 at 5:47 PM, Fastream Technologies
>> FT> <[EMAIL PROTECTED]>wrote:
>>
>> >> Hello Dod,
>> >>
>> >> I think the TrustedCAPath.pem that comes with ICS does not cover the
>> root
>> >> cert that signed mail.google.com.
>> >>
>> >> PLEASE do test the code against as much stress as possible. It is called
>> a
>> >> beta because the server module is not ready yet. I mean the SSL->TCP
>> >> convertor proxy.
>> >>
>> >> Best Regards,
>> >>
>> >> SZ
>> >>
>> >>   On Wed, Nov 26, 2008 at 5:29 PM, Dod <[EMAIL PROTECTED]> wrote:
>> >>
>> >>> Hello Fastream,
>> >>>
>> >>> I  have  checked  the  SSL/TLS  checkbox  (no certificate choosed) and
>> >>> unchecked  "verify  peer"  and now it works on gmail I tested a few MB
>> >>> transfert, it's ok and performances seems same as stunnel on my little
>> >>> PIII-1Ghz. If I check both SSL/TLS and Verify Peer, it do not work.
>> >>>
>> >>> I  can  let  it  run  permanently  if  you want me to test, this gmail
>> >>> account  receive  about  200MB of IP camera video movie files each day
>> >>> (more or less 1.2MB each file).
>> >>>
>> >>> I  will  tell  you  if  it  is more stable than stunnel that I need to
>> >>> restart multiple times a day.
>> >>>
>> >>> regards.
>> >>>
>> >>> FT> Thanks for your effort. For the SSL part, this is purely ICS so I
>> >>> wonder
>> >>> FT> where the bug could be--in the component or app?
>> >>>
>> >>> FT> There is a demo called "sslsimpletcpclient" or similar in ICSv7.
>> Does
>> >>> that
>> >>> FT> work there?
>> >>>
>> >>> FT> Can you tell me a step by step lead to the problem including host
>> >>> addresses.
>> >>> FT> And yes I have a gmail account.
>> >>> FT> Regards,
>> >>>
>> >>> FT> SZ
>> >>> FT> On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:
>> >>>
>> >>> >> Hello Fastream,
>> >>> >>
>> >>> >> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel
>> ...do
>> >>> >> not  work, it connect, I see some data exchange in SSL negotiation
>> but
>> >>> >> no POP3 welcome banner.
>> >>> >>
>> >>> >> regards.
>> >>> >>
>> >>> >> FT> We are developing an alternative "secure tunneling software".
>> >>> Meanwhile
>> >>> >> the
>> >>> >> FT> client side is ready. It is based on Wilfried's excellent
>> Socketspy
>> >>> yet
>> >>> >> much
>> >>> >> FT> enhanced and supports SSL on the outgoing part. It uses single
>> >>> threaded
>> >>> >> FT> architecture with async ICS sockets. Performance exceeds 500Mbps
>> on
>> >>> my
>> >>> >> dual
>> >>> >> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is
>> 50
>> >>> >> concurrent
>> >>> >> FT> connections. SSL part supports client certificates. Could yoiu
>> guys
>> >>> >> have a
>> >>> >> FT> look at it and let me know?:
>> >>> >>
>> >>> >> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
>> >>> >>
>> >>> >> FT> (includes openssl dlls)
>> >>> >>
>> >>> >> FT> Best Regards,
>> >>> >> FT> SZ
>> >>> >>
>> >>>
>> >>>
>>
>> --
>>

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Fastream Technologies]

Hello Dod,

Would you pay $20 for this product? If you need it, how much would you pay
for SSL->TCP tunnel proxy with 10k connections support? What about $400 for
a site license?
Best Regards,

SZ
On Thu, Nov 27, 2008 at 4:07 PM, Dod <[EMAIL PROTECTED]> wrote:

> Hello Fastream,
>
> For now it is stable, no crash, I check gmail each 5 mins, 227MB
> transfered today at the time I write this mail.
>
> I will definitly abandon stunnel ;-)
>
> regards.
>
>
> FT> Please let me know of result of the test.
>
> FT> THANKS!
>
> FT> SZ
>
> FT> On Wed, Nov 26, 2008 at 5:47 PM, Fastream Technologies
> FT> <[EMAIL PROTECTED]>wrote:
>
> >> Hello Dod,
> >>
> >> I think the TrustedCAPath.pem that comes with ICS does not cover the
> root
> >> cert that signed mail.google.com.
> >>
> >> PLEASE do test the code against as much stress as possible. It is called
> a
> >> beta because the server module is not ready yet. I mean the SSL->TCP
> >> convertor proxy.
> >>
> >> Best Regards,
> >>
> >> SZ
> >>
> >>   On Wed, Nov 26, 2008 at 5:29 PM, Dod <[EMAIL PROTECTED]> wrote:
> >>
> >>> Hello Fastream,
> >>>
> >>> I  have  checked  the  SSL/TLS  checkbox  (no certificate choosed) and
> >>> unchecked  "verify  peer"  and now it works on gmail I tested a few MB
> >>> transfert, it's ok and performances seems same as stunnel on my little
> >>> PIII-1Ghz. If I check both SSL/TLS and Verify Peer, it do not work.
> >>>
> >>> I  can  let  it  run  permanently  if  you want me to test, this gmail
> >>> account  receive  about  200MB of IP camera video movie files each day
> >>> (more or less 1.2MB each file).
> >>>
> >>> I  will  tell  you  if  it  is more stable than stunnel that I need to
> >>> restart multiple times a day.
> >>>
> >>> regards.
> >>>
> >>> FT> Thanks for your effort. For the SSL part, this is purely ICS so I
> >>> wonder
> >>> FT> where the bug could be--in the component or app?
> >>>
> >>> FT> There is a demo called "sslsimpletcpclient" or similar in ICSv7.
> Does
> >>> that
> >>> FT> work there?
> >>>
> >>> FT> Can you tell me a step by step lead to the problem including host
> >>> addresses.
> >>> FT> And yes I have a gmail account.
> >>> FT> Regards,
> >>>
> >>> FT> SZ
> >>> FT> On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:
> >>>
> >>> >> Hello Fastream,
> >>> >>
> >>> >> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel
> ...do
> >>> >> not  work, it connect, I see some data exchange in SSL negotiation
> but
> >>> >> no POP3 welcome banner.
> >>> >>
> >>> >> regards.
> >>> >>
> >>> >> FT> We are developing an alternative "secure tunneling software".
> >>> Meanwhile
> >>> >> the
> >>> >> FT> client side is ready. It is based on Wilfried's excellent
> Socketspy
> >>> yet
> >>> >> much
> >>> >> FT> enhanced and supports SSL on the outgoing part. It uses single
> >>> threaded
> >>> >> FT> architecture with async ICS sockets. Performance exceeds 500Mbps
> on
> >>> my
> >>> >> dual
> >>> >> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is
> 50
> >>> >> concurrent
> >>> >> FT> connections. SSL part supports client certificates. Could yoiu
> guys
> >>> >> have a
> >>> >> FT> look at it and let me know?:
> >>> >>
> >>> >> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
> >>> >>
> >>> >> FT> (includes openssl dlls)
> >>> >>
> >>> >> FT> Best Regards,
> >>> >> FT> SZ
> >>> >>
> >>>
> >>>
>
> --
>
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Dod]

Hello Fastream,

For now it is stable, no crash, I check gmail each 5 mins, 227MB
transfered today at the time I write this mail.

I will definitly abandon stunnel ;-)

regards.


FT> Please let me know of result of the test.

FT> THANKS!

FT> SZ

FT> On Wed, Nov 26, 2008 at 5:47 PM, Fastream Technologies
FT> <[EMAIL PROTECTED]>wrote:

>> Hello Dod,
>>
>> I think the TrustedCAPath.pem that comes with ICS does not cover the root
>> cert that signed mail.google.com.
>>
>> PLEASE do test the code against as much stress as possible. It is called a
>> beta because the server module is not ready yet. I mean the SSL->TCP
>> convertor proxy.
>>
>> Best Regards,
>>
>> SZ
>>
>>   On Wed, Nov 26, 2008 at 5:29 PM, Dod <[EMAIL PROTECTED]> wrote:
>>
>>> Hello Fastream,
>>>
>>> I  have  checked  the  SSL/TLS  checkbox  (no certificate choosed) and
>>> unchecked  "verify  peer"  and now it works on gmail I tested a few MB
>>> transfert, it's ok and performances seems same as stunnel on my little
>>> PIII-1Ghz. If I check both SSL/TLS and Verify Peer, it do not work.
>>>
>>> I  can  let  it  run  permanently  if  you want me to test, this gmail
>>> account  receive  about  200MB of IP camera video movie files each day
>>> (more or less 1.2MB each file).
>>>
>>> I  will  tell  you  if  it  is more stable than stunnel that I need to
>>> restart multiple times a day.
>>>
>>> regards.
>>>
>>> FT> Thanks for your effort. For the SSL part, this is purely ICS so I
>>> wonder
>>> FT> where the bug could be--in the component or app?
>>>
>>> FT> There is a demo called "sslsimpletcpclient" or similar in ICSv7. Does
>>> that
>>> FT> work there?
>>>
>>> FT> Can you tell me a step by step lead to the problem including host
>>> addresses.
>>> FT> And yes I have a gmail account.
>>> FT> Regards,
>>>
>>> FT> SZ
>>> FT> On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:
>>>
>>> >> Hello Fastream,
>>> >>
>>> >> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel ...do
>>> >> not  work, it connect, I see some data exchange in SSL negotiation but
>>> >> no POP3 welcome banner.
>>> >>
>>> >> regards.
>>> >>
>>> >> FT> We are developing an alternative "secure tunneling software".
>>> Meanwhile
>>> >> the
>>> >> FT> client side is ready. It is based on Wilfried's excellent Socketspy
>>> yet
>>> >> much
>>> >> FT> enhanced and supports SSL on the outgoing part. It uses single
>>> threaded
>>> >> FT> architecture with async ICS sockets. Performance exceeds 500Mbps on
>>> my
>>> >> dual
>>> >> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is 50
>>> >> concurrent
>>> >> FT> connections. SSL part supports client certificates. Could yoiu guys
>>> >> have a
>>> >> FT> look at it and let me know?:
>>> >>
>>> >> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
>>> >>
>>> >> FT> (includes openssl dlls)
>>> >>
>>> >> FT> Best Regards,
>>> >> FT> SZ
>>> >>
>>>
>>>

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Fastream Technologies]

Please let me know of result of the test.

THANKS!

SZ

On Wed, Nov 26, 2008 at 5:47 PM, Fastream Technologies
<[EMAIL PROTECTED]>wrote:

> Hello Dod,
>
> I think the TrustedCAPath.pem that comes with ICS does not cover the root
> cert that signed mail.google.com.
>
> PLEASE do test the code against as much stress as possible. It is called a
> beta because the server module is not ready yet. I mean the SSL->TCP
> convertor proxy.
>
> Best Regards,
>
> SZ
>
>   On Wed, Nov 26, 2008 at 5:29 PM, Dod <[EMAIL PROTECTED]> wrote:
>
>> Hello Fastream,
>>
>> I  have  checked  the  SSL/TLS  checkbox  (no certificate choosed) and
>> unchecked  "verify  peer"  and now it works on gmail I tested a few MB
>> transfert, it's ok and performances seems same as stunnel on my little
>> PIII-1Ghz. If I check both SSL/TLS and Verify Peer, it do not work.
>>
>> I  can  let  it  run  permanently  if  you want me to test, this gmail
>> account  receive  about  200MB of IP camera video movie files each day
>> (more or less 1.2MB each file).
>>
>> I  will  tell  you  if  it  is more stable than stunnel that I need to
>> restart multiple times a day.
>>
>> regards.
>>
>> FT> Thanks for your effort. For the SSL part, this is purely ICS so I
>> wonder
>> FT> where the bug could be--in the component or app?
>>
>> FT> There is a demo called "sslsimpletcpclient" or similar in ICSv7. Does
>> that
>> FT> work there?
>>
>> FT> Can you tell me a step by step lead to the problem including host
>> addresses.
>> FT> And yes I have a gmail account.
>> FT> Regards,
>>
>> FT> SZ
>> FT> On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:
>>
>> >> Hello Fastream,
>> >>
>> >> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel ...do
>> >> not  work, it connect, I see some data exchange in SSL negotiation but
>> >> no POP3 welcome banner.
>> >>
>> >> regards.
>> >>
>> >> FT> We are developing an alternative "secure tunneling software".
>> Meanwhile
>> >> the
>> >> FT> client side is ready. It is based on Wilfried's excellent Socketspy
>> yet
>> >> much
>> >> FT> enhanced and supports SSL on the outgoing part. It uses single
>> threaded
>> >> FT> architecture with async ICS sockets. Performance exceeds 500Mbps on
>> my
>> >> dual
>> >> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is 50
>> >> concurrent
>> >> FT> connections. SSL part supports client certificates. Could yoiu guys
>> >> have a
>> >> FT> look at it and let me know?:
>> >>
>> >> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
>> >>
>> >> FT> (includes openssl dlls)
>> >>
>> >> FT> Best Regards,
>> >> FT> SZ
>> >>
>>
>>
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Fastream Technologies]

Hello Dod,

I think the TrustedCAPath.pem that comes with ICS does not cover the root
cert that signed mail.google.com.

PLEASE do test the code against as much stress as possible. It is called a
beta because the server module is not ready yet. I mean the SSL->TCP
convertor proxy.

Best Regards,

SZ

On Wed, Nov 26, 2008 at 5:29 PM, Dod <[EMAIL PROTECTED]> wrote:

> Hello Fastream,
>
> I  have  checked  the  SSL/TLS  checkbox  (no certificate choosed) and
> unchecked  "verify  peer"  and now it works on gmail I tested a few MB
> transfert, it's ok and performances seems same as stunnel on my little
> PIII-1Ghz. If I check both SSL/TLS and Verify Peer, it do not work.
>
> I  can  let  it  run  permanently  if  you want me to test, this gmail
> account  receive  about  200MB of IP camera video movie files each day
> (more or less 1.2MB each file).
>
> I  will  tell  you  if  it  is more stable than stunnel that I need to
> restart multiple times a day.
>
> regards.
>
> FT> Thanks for your effort. For the SSL part, this is purely ICS so I
> wonder
> FT> where the bug could be--in the component or app?
>
> FT> There is a demo called "sslsimpletcpclient" or similar in ICSv7. Does
> that
> FT> work there?
>
> FT> Can you tell me a step by step lead to the problem including host
> addresses.
> FT> And yes I have a gmail account.
> FT> Regards,
>
> FT> SZ
> FT> On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:
>
> >> Hello Fastream,
> >>
> >> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel ...do
> >> not  work, it connect, I see some data exchange in SSL negotiation but
> >> no POP3 welcome banner.
> >>
> >> regards.
> >>
> >> FT> We are developing an alternative "secure tunneling software".
> Meanwhile
> >> the
> >> FT> client side is ready. It is based on Wilfried's excellent Socketspy
> yet
> >> much
> >> FT> enhanced and supports SSL on the outgoing part. It uses single
> threaded
> >> FT> architecture with async ICS sockets. Performance exceeds 500Mbps on
> my
> >> dual
> >> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is 50
> >> concurrent
> >> FT> connections. SSL part supports client certificates. Could yoiu guys
> >> have a
> >> FT> look at it and let me know?:
> >>
> >> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
> >>
> >> FT> (includes openssl dlls)
> >>
> >> FT> Best Regards,
> >> FT> SZ
> >>
>
>  --
> To unsubscribe or change your settings for TWSocket mailing list
> please goto http://lists.elists.org/cgi- 
>
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Dod]

Hello Fastream,

I  have  checked  the  SSL/TLS  checkbox  (no certificate choosed) and
unchecked  "verify  peer"  and now it works on gmail I tested a few MB
transfert, it's ok and performances seems same as stunnel on my little
PIII-1Ghz. If I check both SSL/TLS and Verify Peer, it do not work.

I  can  let  it  run  permanently  if  you want me to test, this gmail
account  receive  about  200MB of IP camera video movie files each day
(more or less 1.2MB each file).

I  will  tell  you  if  it  is more stable than stunnel that I need to
restart multiple times a day.

regards.

FT> Thanks for your effort. For the SSL part, this is purely ICS so I wonder
FT> where the bug could be--in the component or app?

FT> There is a demo called "sslsimpletcpclient" or similar in ICSv7. Does that
FT> work there?

FT> Can you tell me a step by step lead to the problem including host addresses.
FT> And yes I have a gmail account.
FT> Regards,

FT> SZ
FT> On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:

>> Hello Fastream,
>>
>> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel ...do
>> not  work, it connect, I see some data exchange in SSL negotiation but
>> no POP3 welcome banner.
>>
>> regards.
>>
>> FT> We are developing an alternative "secure tunneling software". Meanwhile
>> the
>> FT> client side is ready. It is based on Wilfried's excellent Socketspy yet
>> much
>> FT> enhanced and supports SSL on the outgoing part. It uses single threaded
>> FT> architecture with async ICS sockets. Performance exceeds 500Mbps on my
>> dual
>> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is 50
>> concurrent
>> FT> connections. SSL part supports client certificates. Could yoiu guys
>> have a
>> FT> look at it and let me know?:
>>
>> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
>>
>> FT> (includes openssl dlls)
>>
>> FT> Best Regards,
>> FT> SZ
>>

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Fastream Technologies]

Hello Dod,

Thanks for your effort. For the SSL part, this is purely ICS so I wonder
where the bug could be--in the component or app?

There is a demo called "sslsimpletcpclient" or similar in ICSv7. Does that
work there?

Can you tell me a step by step lead to the problem including host addresses.
And yes I have a gmail account.
Regards,

SZ
On Wed, Nov 26, 2008 at 4:45 PM, Dod <[EMAIL PROTECTED]> wrote:

> Hello Fastream,
>
> Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel ...do
> not  work, it connect, I see some data exchange in SSL negotiation but
> no POP3 welcome banner.
>
> regards.
>
> FT> We are developing an alternative "secure tunneling software". Meanwhile
> the
> FT> client side is ready. It is based on Wilfried's excellent Socketspy yet
> much
> FT> enhanced and supports SSL on the outgoing part. It uses single threaded
> FT> architecture with async ICS sockets. Performance exceeds 500Mbps on my
> dual
> FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is 50
> concurrent
> FT> connections. SSL part supports client certificates. Could yoiu guys
> have a
> FT> look at it and let me know?:
>
> FT> http://www.fastream.net/alpha/SecureTunnelClient.zip
>
> FT> (includes openssl dlls)
>
> FT> Best Regards,
> FT> SZ
>
-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Re: [twsocket] OT: Beta yet stable secure tunnel client--looking forward to your comments!

[Dod]

Hello Fastream,

Tested  to  make POP3-SSL tunnel to Gmail like I do with STunnel ...do
not  work, it connect, I see some data exchange in SSL negotiation but
no POP3 welcome banner.

regards.

FT> We are developing an alternative "secure tunneling software". Meanwhile the
FT> client side is ready. It is based on Wilfried's excellent Socketspy yet much
FT> enhanced and supports SSL on the outgoing part. It uses single threaded
FT> architecture with async ICS sockets. Performance exceeds 500Mbps on my dual
FT> core 2.4GHz Core 2 Duo system. Hard-coded limit in the beta is 50 concurrent
FT> connections. SSL part supports client certificates. Could yoiu guys have a
FT> look at it and let me know?:

FT> http://www.fastream.net/alpha/SecureTunnelClient.zip

FT> (includes openssl dlls)

FT> Best Regards,
FT> SZ

-- 
To unsubscribe or change your settings for TWSocket mailing list
please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be