Re: stunnel stopped working today, had to reboot server

Peter Pentchev <[email protected]> Wed, 13 Feb 2019 20:09:28 +0200

Newsgroups	gmane.network.stunnel.user
Message-ID	<[email protected]>

On Wed, Feb 13, 2019 at 12:17:24PM -0500, Christopher Schultz wrote:
> Hello,
> 
> I'm new to the list so I'm sorry if this isn't the right place to report
> this.
> 
> I had a server stop responding to stunnel connections sometime yesterday
> and the resolution was ultimately to reboot the server and everything
> was okay. Restarting the stunnel service was not enough to get things
> working again.
[snip]
> 
> Looking through the log file, I could see that there were some odd
> messages coming from stunnel in the daemon.log file suggesting that
> there might be a memory leak. I won't post them here unless requested,
> as they may represent a potential security issue.

Hi,

Unfortunately this is a known problem with the Debian package of
stunnel; I did not get around to backporting the fixes to the stunnel
version that is in Debian 9.x (stretch); I'm really sorry about that.

I could make a stretch backport of the stunnel version that is in
unstable/testing right now - the one that will be in the upcoming
Debian 10.x (buster).  Actually I'll build a package later tonight and
let you know where you can download it from, then I'll upload it
to the stretch-backports suite and wait for the backports admins to
accept it.  This package will not have the memory exhaustion problem
that the version in stretch does have.

Could you just confirm that you are indeed running Debian 9.x (stretch)?
(it seems this way from the kernel version that you are running and
 from the symptoms; stunnel 5.06 in jessie does not have this problem)

Sorry again, and thanks for your understanding!

G'luck,
Peter

-- 
Peter Pentchev  roam@{ringlet.net,debian.org,FreeBSD.org} [email protected]
PGP key:        http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

signature.asc (application/pgp-signature, 833 B)