Re: stunnel 5.37 released

Hi Mike,

I'm facing three compilation issues on MacOS:

#1. Compiling stunnel with OpenSSL 1.1.x leads to stunnel getting stuck on /dev/null at launch without any apparent reason (./stunnel --version or ./stunnel --help, nothing works, the process doesn't output anything at all)

sudo dtruss ./src/stunnel --version
[...]
mprotect(0x10720D000, 0x88, 0x3)		 = 0 0
mprotect(0x10720D000, 0x88, 0x1)		 = 0 0
issetugid(0x10720D000, 0x88, 0x1)		 = 0 0
getpid(0x10720D000, 0x88, 0x1)		 = 29397 0
stat64("/AppleInternal/XBS/.isChrooted\0", 0x7FFF58C86D38, 0x1)		 = -1 Err#2
stat64("/AppleInternal\0", 0x7FFF58C86CA8, 0x1)		 = -1 Err#2
csops(0x72D5, 0x7, 0x7FFF58C867C0)		 = -1 Err#22
sysctl(0x7FFF58C86B80, 0x4, 0x7FFF58C868F8)		 = 0 0
csops(0x72D5, 0x7, 0x7FFF58C860B0)		 = -1 Err#22
proc_info(0x2, 0x72D5, 0x11)		 = 56 0
open("/dev/null\0", 0x2, 0x106F78D00)		 = 3 0

#2. Since stunnel version 5.35 the zlib dynamic loader needed by OpenSSL has been removed (in configure.ac). This line is missing:

AC_SEARCH_LIBS([inflateEnd], [z])

Leading to the following issue at compilation (when stunnel is compiled with zlib support):

Undefined symbols for architecture x86_64:
  "_deflate", referenced from:
      _zlib_stateful_compress_block in libcrypto.a(c_zlib.o)
      _bio_zlib_write in libcrypto.a(c_zlib.o)
      _bio_zlib_ctrl in libcrypto.a(c_zlib.o)
  "_deflateEnd", referenced from:
      _zlib_stateful_finish in libcrypto.a(c_zlib.o)
      _bio_zlib_free in libcrypto.a(c_zlib.o)
  "_deflateInit_", referenced from:
      _zlib_stateful_init in libcrypto.a(c_zlib.o)
      _bio_zlib_write in libcrypto.a(c_zlib.o)
  "_inflate", referenced from:
      _zlib_stateful_expand_block in libcrypto.a(c_zlib.o)
      _bio_zlib_read in libcrypto.a(c_zlib.o)
  "_inflateEnd", referenced from:
      _zlib_stateful_finish in libcrypto.a(c_zlib.o)
      _bio_zlib_free in libcrypto.a(c_zlib.o)
  "_inflateInit_", referenced from:
      _zlib_stateful_init in libcrypto.a(c_zlib.o)
      _bio_zlib_read in libcrypto.a(c_zlib.o)
  "_zError", referenced from:
      _bio_zlib_write in libcrypto.a(c_zlib.o)
      _bio_zlib_read in libcrypto.a(c_zlib.o)
      _bio_zlib_ctrl in libcrypto.a(c_zlib.o)
ld: symbol(s) not found for architecture x86_64
collect2: error: ld returned 1 exit status
make[2]: *** [stunnel] Error 1
make[1]: *** [all] Error 2
make: *** [all-recursive] Error 1

#3. When supplying the option "--with-ssl=" and "--enable-static --disable-shared", if the lib/ openssl folder contains dynamic libraries *.dylib along with the static libraries *.a, stunnel will compile thinking it should use the dynamic openssl library... Which doesn't make sense since the option "--enable-static" should enforce the use of static libraries. Manually removing the *.dylib files and leaving only the *.a files of openssl resolves the issue and integrates openssl within stunnel. Compiling openssl with the "no-shared" option should work as well.

I think #1 is the most important to look into atm, since it prevents stunnel from being compiled on OSX with the latest stable OpenSSL version.

Please let me know.

Regards,

Thireus ([email protected] <mailto:[email protected]>)

> Le 7 Nov 2016 à 00:53, Michał Trojnara <[email protected]> a écrit :
> 
> Dear Users,
> 
> I have released version 5.37 of stunnel.
> 
> Version 5.37, 2016.11.06, urgency: MEDIUM
> * Bugfixes
>  - OpenSSL DLLs updated to version 1.0.2j (stops crashes).
>  - The default SNI target (not handled by any slave service)
>    is handled by the master service rather than rejected.
>  - Removed thread synchronization in the FORK threading model.
> 
> Home page: https://www.stunnel.org/
> Download:  https://www.stunnel.org/downloads.html
> 
> SHA-256 hashes:
> d0e3530e3effc64fdec792c71791d4937c6b8bd3b9ea4895c6bb6526dcd0d241
> stunnel-5.37.tar.gz
> b1015afdfc536312b9e3556483c9bfeefd9e29d6f483d305459033272adcf4ad
> stunnel-5.37-installer.exe
> 4bda9b0116676fec7533b3c1e40b9d24f0722e6317c59be4831c19102f4a925c
> stunnel-5.37-android.zip
> 
> Best regards,
>    Mike
> 
> _______________________________________________
> stunnel-users mailing list
> [email protected]
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users