Re: [EXTERNAL] Re: Stunnel connection issue?

"Spies, Will" <[email protected]>
Newsgroups gmane.network.stunnel.user
Message-ID <[email protected]>
So,  part of this appeared to be I needed a signed cert from a CA.  However,  I still have problems.  

Alexa apparently requires 'Interleaved TCP on port 443 (for both RTP and RTSP). TCP socket encryption on port 443 using TLS 1.2'

How do I force Stunnel to only adhere to above?  I get the 443 part of course.  I am seeing it try SSLv3 in the log and I imagine this is wrong. 


-----Original Message-----
From: Peter Pentchev [mailto:[email protected]] 
Sent: Thursday, July 05, 2018 8:47 AM
To: Spies, Will <[email protected]>
Cc: [email protected]
Subject: Re: [EXTERNAL] Re: [stunnel-users] Stunnel connection issue?

On Thu, Jul 05, 2018 at 11:41:18AM +0000, Spies, Will wrote:
> Thanks for the quick response. The client is an Echo Show device and 
> there is no log. It is an RTSP connection and my backend (behind
> Stunnel) is Live555ProxyServer.  I read somewhere there is some bug 
> related to MSIE that closed the connection like this and the fix is to 
> use TIMEOUTclose=0 which I did but this did not help. This is the 
> earlier (startup) portion of my log:

Hi,

Unfortunately, without more information about what the client doesn't like about the established connection, I don't think there is anything more I can help you with :(  You *might* try playing with stunnel's cipher settings (OpenSSL options), on the off chance that the client is somewhat confused and offers for negotiation a cipher or something that it later realizes it cannot support... but that would be really weird.

G'luck,
Peter

--
Peter Pentchev  roam@{ringlet.net,debian.org,FreeBSD.org} [email protected]
PGP key:        http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13
_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.