Re: using sTunnel with Chrome (Pierre DUPONT)
Brent Kimberley <[email protected]> Mon, 9 Sep 2019 17:40:11 +0000 (UTC)
| Newsgroups | gmane.network.stunnel.user |
|---|---|
| Message-ID | <[email protected]> |
--===============4210525458419982030==
Content-Type: multipart/alternative;
boundary="----=_Part_3039283_1544986954.1568050811186"
------=_Part_3039283_1544986954.1568050811186
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Salut Pierre.
I'm not sure what's wrong.
Try using a tool like winmerge, windiff or notepad to compare .\config\stun=
nel.conf and .\config\openssl.cnf
Then verify that openssl is functional> cd "C:\Program Files (x86)\stunnel"
> .\bin\openssl versionOpenSSL 1.1.1c=C2=A0 28 May 2019
On Monday, September 9, 2019, 09:38:02 a.m. EDT, Pierre DUPONT <pierre.=
[email protected]> wrote: =20
=20
Hello Brent,
Thanks for your answer. Unfortunately, I could not make these dumps...
Here comes below what I typed, what I got as return and my sTunnel tree (sT=
unnel and our webservice are both hosted on the same machine running W7 64
C:\Program Files (x86)\stunnel>bin\openssl x509 -in config\stunnel.crt -noo=
ut -text
unable to load certificate
3904:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.=
c:745
:Expecting: TRUSTED CERTIFICATE
C:\Program Files (x86)\stunnel>tree /F
Structure du dossier
Le num=C3=A9ro de s=C3=A9rie du volume est 961B-57B7
C:.
=E2=94=82=C2=A0 uninstall.exe
=E2=94=82
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80bin
=E2=94=82=C2=A0 =C2=A0 =C2=A0 libcrypto-1_1-x64.dll
=E2=94=82=C2=A0 =C2=A0 =C2=A0 libssl-1_1-x64.dll
=E2=94=82=C2=A0 =C2=A0 =C2=A0 openssl.exe
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.exe
=E2=94=82=C2=A0 =C2=A0 =C2=A0 tstunnel.exe
=E2=94=82
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80config
=E2=94=82=C2=A0 =C2=A0 =C2=A0 ca-certs.pem
=E2=94=82=C2=A0 =C2=A0 =C2=A0 openssl.cnf
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.cert
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.conf
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.crt
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.pem
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnelChrome.cer
=E2=94=82
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80doc
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.html
=E2=94=82
=E2=94=94=E2=94=80=E2=94=80=E2=94=80engines
=C2=A0 =C2=A0 =C2=A0 =C2=A0 capi.dll
=C2=A0 =C2=A0 =C2=A0 =C2=A0 padlock.dll
=C2=A0 =C2=A0 =C2=A0 =C2=A0 pkcs11.dll
With kind regards from
Pierre Dupont
Support & D=C3=A9veloppement for libraries
Mail=C2=A0:=C2=A0 [email protected]
Phone : =C2=A033 6 13 99 69 38 =E2=80=93 33 1.61.03.03 18
8/10 Chemin d=E2=80=99Andr=C3=A9sy
95610 Eragny sur Oise
-----Message d'origine-----
De=C2=A0: Brent Kimberley [mailto:[email protected]]=20
Envoy=C3=A9=C2=A0: vendredi 6 septembre 2019 18:02
=C3=80=C2=A0: Pierre DUPONT <[email protected]>; stunnel-users@stunnel=
.org
Cc=C2=A0: Brent Kimberley <[email protected]>
Objet=C2=A0: TR: using sTunnel with Chrome (Pierre DUPONT)
Dump your stunnel.crt file.=C2=A0=C2=A0
<stunnel_home>/bin/openssl x509 -in=C2=A0stunnel.crt=C2=A0 -noout -text
And, compare with=C2=A0
* section 4 of=C2=A0https://tools.ietf.org/html/rfc5280
* Peer-reviewed public sites.=C2=A0=C2=A0https://www.ssllabs.com/ssltest/
Dump your stunnel.cnf file.=C2=A0 And, compare with=C2=A0
stunnel_home>/config/openssl.cnf file
https://access.redhat.com/solutions/28965
https://www.openssl.org/docs/manmaster/man5/x509v3_config.html
----------------------------------------------------------------------
From: Pierre DUPONT <[email protected]>
De : Pierre DUPONT
Envoy? : jeudi 5 septembre 2019 16:55
Cc : _sav.bibli <[email protected]>; Philippe ANQUETIN <philippe.anquetin@=
nedap.fr>
Objet : using sTunnel with Chrome
Good day to all. So far, I can't succeed to use Chrome with sTunnel.
Here is my configuration for sTunnel....
However, I cannot connect on https
I tried several things found browsing the list, like building a certificate=
with
openssl req -new -x509 -days 365 -nodes -config stunnel.cnf -out stunnel.cr=
t -keyout stunnel.crt
No result so the only solution I see now is to call you for some help...
With kind regards,
Cordiales salutations de
Pierre Dupont
Support S.A.V. & D?veloppement Biblioth?ques
Courriel S.A.V. :[email protected]<mailto:[email protected]>
06 13 99 69 38 - 01.61.03.03 18
8/10 Chemin d'Andr?sy
95610 Eragny sur Oise
NEDAP LOGO
=20
------=_Part_3039283_1544986954.1568050811186
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydp777e8123yahoo-style-wrap" style=
=3D"font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px=
;"><div></div>
<div dir=3D"ltr" data-setdir=3D"false">Salut Pierre.</div><div dir=
=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"fa=
lse">I'm not sure what's wrong.</div><div dir=3D"ltr" data-setdir=3D"false"=
><br></div><div dir=3D"ltr" data-setdir=3D"false">Try using a tool like win=
merge, windiff or notepad to compare .\config\stunnel.conf and .\config\ope=
nssl.cnf</div><div dir=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"=
ltr" data-setdir=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"false"=
><div><div dir=3D"ltr" data-setdir=3D"false" style=3D"color: rgb(0, 0, 0); =
font-family: Helvetica Neue, Helvetica, Arial, sans-serif; font-size: 16px;=
">Then verify that openssl is functional</div><div dir=3D"ltr" data-setdir=
=3D"false" style=3D"color: rgb(0, 0, 0); font-family: Helvetica Neue, Helve=
tica, Arial, sans-serif; font-size: 16px;">> cd "C:\Program Files (x86)\=
stunnel"<br></div><div dir=3D"ltr" data-setdir=3D"false" style=3D"color: rg=
b(0, 0, 0); font-family: Helvetica Neue, Helvetica, Arial, sans-serif; font=
-size: 16px;"><div>> .\bin\openssl version</div><div>OpenSSL 1.1.1c =
; 28 May 2019</div><div><br></div></div></div></div><div dir=3D"ltr" data-s=
etdir=3D"false"><br></div><div><br></div>
=20
</div><div id=3D"ydp19fa06f9yahoo_quoted_8652046745" class=3D"ydp19=
fa06f9yahoo_quoted">
<div style=3D"font-family:'Helvetica Neue', Helvetica, Arial, s=
ans-serif;font-size:13px;color:#26282a;">
=20
<div>
On Monday, September 9, 2019, 09:38:02 a.m. EDT, Pierre=
DUPONT <[email protected]> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div dir=3D"ltr">Hello Brent,<br clear=3D"none"><br cl=
ear=3D"none">Thanks for your answer. Unfortunately, I could not make these =
dumps...<br clear=3D"none"><br clear=3D"none">Here comes below what I typed=
, what I got as return and my sTunnel tree (sTunnel and our webservice are =
both hosted on the same machine running W7 64<br clear=3D"none"><br clear=
=3D"none">C:\Program Files (x86)\stunnel>bin\openssl x509 -in config\stu=
nnel.crt -noout -text<br clear=3D"none">unable to load certificate<br clear=
=3D"none">3904:error:0909006C:PEM routines:get_name:no start line:crypto/pe=
m/pem_lib.c:745<br clear=3D"none">:Expecting: TRUSTED CERTIFICATE<br clear=
=3D"none"><br clear=3D"none">C:\Program Files (x86)\stunnel>tree /F<br c=
lear=3D"none">Structure du dossier<br clear=3D"none">Le num=C3=A9ro de s=C3=
=A9rie du volume est 961B-57B7<br clear=3D"none">C:.<br clear=3D"none">=E2=
=94=82 uninstall.exe<br clear=3D"none">=E2=94=82<br clear=3D"none">=
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80bin<br clear=3D"none">=E2=94=82 &=
nbsp; libcrypto-1_1-x64.dll<br clear=3D"none">=E2=94=82  =
; libssl-1_1-x64.dll<br clear=3D"none">=E2=94=82  =
; openssl.exe<br clear=3D"none">=E2=94=82 stunnel.exe=
<br clear=3D"none">=E2=94=82 tstunnel.exe<br clear=3D"=
none">=E2=94=82<br clear=3D"none">=E2=94=9C=E2=94=80=E2=94=80=E2=94=80confi=
g<br clear=3D"none">=E2=94=82 ca-certs.pem<br clear=3D=
"none">=E2=94=82 openssl.cnf<br clear=3D"none">=E2=94=
=82 stunnel.cert<br clear=3D"none">=E2=94=82 &nb=
sp; stunnel.conf<br clear=3D"none">=E2=94=82 s=
tunnel.crt<br clear=3D"none">=E2=94=82 stunnel.pem<br =
clear=3D"none">=E2=94=82 stunnelChrome.cer<br clear=3D=
"none">=E2=94=82<br clear=3D"none">=E2=94=9C=E2=94=80=E2=94=80=E2=94=80doc<=
br clear=3D"none">=E2=94=82 stunnel.html<br clear=3D"n=
one">=E2=94=82<br clear=3D"none">=E2=94=94=E2=94=80=E2=94=80=E2=94=80engine=
s<br clear=3D"none"> capi.dll<br clear=3D"none">=
padlock.dll<br clear=3D"none"> &nb=
sp; pkcs11.dll<br clear=3D"none"><br clear=3D"none">With kind regard=
s from<br clear=3D"none">Pierre Dupont<br clear=3D"none">Support & D=C3=
=A9veloppement for libraries<br clear=3D"none"><br clear=3D"none">Mail =
;: <a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D"nofoll=
ow" target=3D"_blank">[email protected]</a><br clear=3D"none">Phone : &nbs=
p;33 6 13 99 69 38 =E2=80=93 33 1.61.03.03 18<br clear=3D"none">8/10 Chemin=
d=E2=80=99Andr=C3=A9sy<br clear=3D"none">95610 Eragny sur Oise<br clear=3D=
"none"><br clear=3D"none"><br clear=3D"none"><br clear=3D"none"><div class=
=3D"ydp19fa06f9yqt9882683272" id=3D"ydp19fa06f9yqtfd43787"><br clear=3D"non=
e">-----Message d'origine-----<br clear=3D"none">De : Brent Kimberley =
[mailto:<a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D=
"nofollow" target=3D"_blank">[email protected]</a>] <br clear=3D"n=
one">Envoy=C3=A9 : vendredi 6 septembre 2019 18:02<br clear=3D"none">=
=C3=80 : Pierre DUPONT <<a shape=3D"rect" href=3D"mailto:pierre.dup=
[email protected]" rel=3D"nofollow" target=3D"_blank">[email protected]</a>=
>; <a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D"no=
follow" target=3D"_blank">[email protected]</a><br clear=3D"none">C=
c : Brent Kimberley <<a shape=3D"rect" href=3D"mailto:brent_kimberl=
[email protected]" rel=3D"nofollow" target=3D"_blank">[email protected]=
m</a>><br clear=3D"none">Objet : TR: using sTunnel with Chrome (Pie=
rre DUPONT)<br clear=3D"none"><br clear=3D"none">Dump your stunnel.crt file=
. <br clear=3D"none"><stunnel_home>/bin/openssl x509 -in&n=
bsp;stunnel.crt -noout -text<br clear=3D"none"><br clear=3D"none">And=
, compare with <br clear=3D"none">* section 4 of <a shape=3D"rect=
" href=3D"https://tools.ietf.org/html/rfc5280" rel=3D"nofollow" target=3D"_=
blank">https://tools.ietf.org/html/rfc5280</a><br clear=3D"none">* Peer-rev=
iewed public sites. <a shape=3D"rect" href=3D"https://www.ssllab=
s.com/ssltest/" rel=3D"nofollow" target=3D"_blank">https://www.ssllabs.com/=
ssltest/</a><br clear=3D"none"><br clear=3D"none"><br clear=3D"none">Dump y=
our stunnel.cnf file. And, compare with <br clear=3D"none">stunn=
el_home>/config/openssl.cnf file<br clear=3D"none"><a shape=3D"rect" hre=
f=3D"https://access.redhat.com/solutions/28965" rel=3D"nofollow" target=3D"=
_blank">https://access.redhat.com/solutions/28965</a><br clear=3D"none"><a =
shape=3D"rect" href=3D"https://www.openssl.org/docs/manmaster/man5/x509v3_c=
onfig.html" rel=3D"nofollow" target=3D"_blank">https://www.openssl.org/docs=
/manmaster/man5/x509v3_config.html</a><br clear=3D"none"><br clear=3D"none"=
><br clear=3D"none">-------------------------------------------------------=
---------------<br clear=3D"none"><br clear=3D"none">From: Pierre DUPONT &l=
t;<a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D"nofollow"=
target=3D"_blank">[email protected]</a>><br clear=3D"none"><br cle=
ar=3D"none">De : Pierre DUPONT<br clear=3D"none">Envoy? : jeudi 5 septembre=
2019 16:55<br clear=3D"none">Cc : _sav.bibli <<a shape=3D"rect" href=3D=
"mailto:[email protected]" rel=3D"nofollow" target=3D"_blank">sav.bibli@ne=
dap.fr</a>>; Philippe ANQUETIN <<a shape=3D"rect" href=3D"mailto:phil=
[email protected]" rel=3D"nofollow" target=3D"_blank">philippe.anqueti=
[email protected]</a>><br clear=3D"none">Objet : using sTunnel with Chrome<br c=
lear=3D"none"><br clear=3D"none">Good day to all. So far, I can't succeed t=
o use Chrome with sTunnel.<br clear=3D"none"><br clear=3D"none">Here is my =
configuration for sTunnel....<br clear=3D"none"><br clear=3D"none">However,=
I cannot connect on https<br clear=3D"none"><br clear=3D"none">I tried sev=
eral things found browsing the list, like building a certificate with<br cl=
ear=3D"none">openssl req -new -x509 -days 365 -nodes -config stunnel.cnf -o=
ut stunnel.crt -keyout stunnel.crt<br clear=3D"none"><br clear=3D"none">No =
result so the only solution I see now is to call you for some help...<br cl=
ear=3D"none"><br clear=3D"none">With kind regards,<br clear=3D"none"><br cl=
ear=3D"none"><br clear=3D"none">Cordiales salutations de<br clear=3D"none">=
Pierre Dupont<br clear=3D"none">Support S.A.V. & D?veloppement Biblioth=
?ques<br clear=3D"none"><br clear=3D"none">Courriel S.A.V. : <a shape=
=3D"rect" href=3D"mailto:[email protected]" rel=3D"nofollow" target=3D"_bl=
ank">[email protected]</a><mailto:<a shape=3D"rect" href=3D"mailto:sav.=
[email protected]" rel=3D"nofollow" target=3D"_blank">[email protected]</a>&g=
t;<br clear=3D"none">06 13 99 69 38 - 01.61.03.03 18<br clear=3D"none">8/10=
Chemin d'Andr?sy<br clear=3D"none">95610 Eragny sur Oise<br clear=3D"none"=
>NEDAP LOGO<br clear=3D"none"><br clear=3D"none"></div></div></div>
</div>
</div></body></html>
------=_Part_3039283_1544986954.1568050811186--
--===============4210525458419982030==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
--===============4210525458419982030==--