Re: using sTunnel with Chrome (Pierre DUPONT)
Brent Kimberley <[email protected]> Tue, 10 Sep 2019 14:59:25 +0000 (UTC)
| Newsgroups | gmane.network.stunnel.user |
|---|---|
| Message-ID | <[email protected]> |
--===============6600631510445024769==
Content-Type: multipart/alternative;
boundary="----=_Part_3406194_1769377049.1568127565489"
------=_Part_3406194_1769377049.1568127565489
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
.crt is most likely the private key.=C2=A0 .pem is most likely the certifi=
cate.
ref:https://tools.ietf.org/html/rfc7468
On Monday, September 9, 2019, 01:40:11 p.m. EDT, Brent Kimberley <brent=
[email protected]> wrote: =20
=20
Salut Pierre.
I'm not sure what's wrong.
Try using a tool like winmerge, windiff or notepad to compare .\config\stun=
nel.conf and .\config\openssl.cnf
Then verify that openssl is functional> cd "C:\Program Files (x86)\stunnel"
> .\bin\openssl versionOpenSSL 1.1.1c=C2=A0 28 May 2019
On Monday, September 9, 2019, 09:38:02 a.m. EDT, Pierre DUPONT <pierre.=
[email protected]> wrote: =20
=20
Hello Brent,
Thanks for your answer. Unfortunately, I could not make these dumps...
Here comes below what I typed, what I got as return and my sTunnel tree (sT=
unnel and our webservice are both hosted on the same machine running W7 64
C:\Program Files (x86)\stunnel>bin\openssl x509 -in config\stunnel.crt -noo=
ut -text
unable to load certificate
3904:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.=
c:745
:Expecting: TRUSTED CERTIFICATE
C:\Program Files (x86)\stunnel>tree /F
Structure du dossier
Le num=C3=A9ro de s=C3=A9rie du volume est 961B-57B7
C:.
=E2=94=82=C2=A0 uninstall.exe
=E2=94=82
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80bin
=E2=94=82=C2=A0 =C2=A0 =C2=A0 libcrypto-1_1-x64.dll
=E2=94=82=C2=A0 =C2=A0 =C2=A0 libssl-1_1-x64.dll
=E2=94=82=C2=A0 =C2=A0 =C2=A0 openssl.exe
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.exe
=E2=94=82=C2=A0 =C2=A0 =C2=A0 tstunnel.exe
=E2=94=82
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80config
=E2=94=82=C2=A0 =C2=A0 =C2=A0 ca-certs.pem
=E2=94=82=C2=A0 =C2=A0 =C2=A0 openssl.cnf
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.cert
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.conf
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.crt
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.pem
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnelChrome.cer
=E2=94=82
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80doc
=E2=94=82=C2=A0 =C2=A0 =C2=A0 stunnel.html
=E2=94=82
=E2=94=94=E2=94=80=E2=94=80=E2=94=80engines
=C2=A0 =C2=A0 =C2=A0 =C2=A0 capi.dll
=C2=A0 =C2=A0 =C2=A0 =C2=A0 padlock.dll
=C2=A0 =C2=A0 =C2=A0 =C2=A0 pkcs11.dll
With kind regards from
Pierre Dupont
Support & D=C3=A9veloppement for libraries
Mail=C2=A0:=C2=A0 [email protected]
Phone : =C2=A033 6 13 99 69 38 =E2=80=93 33 1.61.03.03 18
8/10 Chemin d=E2=80=99Andr=C3=A9sy
95610 Eragny sur Oise
-----Message d'origine-----
De=C2=A0: Brent Kimberley [mailto:[email protected]]=20
Envoy=C3=A9=C2=A0: vendredi 6 septembre 2019 18:02
=C3=80=C2=A0: Pierre DUPONT <[email protected]>; stunnel-users@stunnel=
.org
Cc=C2=A0: Brent Kimberley <[email protected]>
Objet=C2=A0: TR: using sTunnel with Chrome (Pierre DUPONT)
Dump your stunnel.crt file.=C2=A0=C2=A0
<stunnel_home>/bin/openssl x509 -in=C2=A0stunnel.crt=C2=A0 -noout -text
And, compare with=C2=A0
* section 4 of=C2=A0https://tools.ietf.org/html/rfc5280
* Peer-reviewed public sites.=C2=A0=C2=A0https://www.ssllabs.com/ssltest/
Dump your stunnel.cnf file.=C2=A0 And, compare with=C2=A0
stunnel_home>/config/openssl.cnf file
https://access.redhat.com/solutions/28965
https://www.openssl.org/docs/manmaster/man5/x509v3_config.html
----------------------------------------------------------------------
From: Pierre DUPONT <[email protected]>
De : Pierre DUPONT
Envoy? : jeudi 5 septembre 2019 16:55
Cc : _sav.bibli <[email protected]>; Philippe ANQUETIN <philippe.anquetin@=
nedap.fr>
Objet : using sTunnel with Chrome
Good day to all. So far, I can't succeed to use Chrome with sTunnel.
Here is my configuration for sTunnel....
However, I cannot connect on https
I tried several things found browsing the list, like building a certificate=
with
openssl req -new -x509 -days 365 -nodes -config stunnel.cnf -out stunnel.cr=
t -keyout stunnel.crt
No result so the only solution I see now is to call you for some help...
With kind regards,
Cordiales salutations de
Pierre Dupont
Support S.A.V. & D?veloppement Biblioth?ques
Courriel S.A.V. :[email protected]<mailto:[email protected]>
06 13 99 69 38 - 01.61.03.03 18
8/10 Chemin d'Andr?sy
95610 Eragny sur Oise
NEDAP LOGO
=20
------=_Part_3406194_1769377049.1568127565489
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydp67094de2yahoo-style-wrap" style=
=3D"font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px=
;"><div></div>
<div dir=3D"ltr" data-setdir=3D"false">.crt is most likely the priv=
ate key. .pem is most likely the certificate.</div><div dir=3D"ltr" d=
ata-setdir=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"false">ref:<=
/div><div dir=3D"ltr" data-setdir=3D"false"><a href=3D"https://tools.ietf.o=
rg/html/rfc7468" rel=3D"nofollow" target=3D"_blank">https://tools.ietf.org/=
html/rfc7468</a><br></div><div><br></div>
=20
</div><div id=3D"ydpb912aa1fyahoo_quoted_8870050680" class=3D"ydpb9=
12aa1fyahoo_quoted">
<div style=3D"font-family:'Helvetica Neue', Helvetica, Arial, s=
ans-serif;font-size:13px;color:#26282a;">
=20
<div>
On Monday, September 9, 2019, 01:40:11 p.m. EDT, Brent =
Kimberley <[email protected]> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id=3D"ydpb912aa1fyiv0144117832"><div><div class=
=3D"ydpb912aa1fyiv0144117832ydp777e8123yahoo-style-wrap" style=3D"font-fami=
ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div=
>
<div dir=3D"ltr">Salut Pierre.</div><div dir=3D"ltr"><br clear=3D"n=
one"></div><div dir=3D"ltr">I'm not sure what's wrong.</div><div dir=3D"ltr=
"><br clear=3D"none"></div><div dir=3D"ltr">Try using a tool like winmerge,=
windiff or notepad to compare .\config\stunnel.conf and .\config\openssl.c=
nf</div><div dir=3D"ltr"><br clear=3D"none"></div><div dir=3D"ltr"><br clea=
r=3D"none"></div><div dir=3D"ltr"><div><div dir=3D"ltr" style=3D"color:rgb(=
0, 0, 0);font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size=
:16px;">Then verify that openssl is functional</div><div dir=3D"ltr" style=
=3D"color:rgb(0, 0, 0);font-family:Helvetica Neue, Helvetica, Arial, sans-s=
erif;font-size:16px;">> cd "C:\Program Files (x86)\stunnel"<br clear=3D"=
none"></div><div dir=3D"ltr" style=3D"color:rgb(0, 0, 0);font-family:Helvet=
ica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div>> .\bin\ope=
nssl version</div><div>OpenSSL 1.1.1c 28 May 2019</div><div><br clear=
=3D"none"></div></div></div></div><div dir=3D"ltr"><br clear=3D"none"></div=
><div><br clear=3D"none"></div>
=20
</div><div class=3D"ydpb912aa1fyiv0144117832yqt4516301879" id=3D"yd=
pb912aa1fyiv0144117832yqt20128"><div class=3D"ydpb912aa1fyiv0144117832ydp19=
fa06f9yahoo_quoted" id=3D"ydpb912aa1fyiv0144117832ydp19fa06f9yahoo_quoted_8=
652046745">
<div style=3D"font-family:'Helvetica Neue', Helvetica, Arial, s=
ans-serif;font-size:13px;color:#26282a;">
=20
<div>
On Monday, September 9, 2019, 09:38:02 a.m. EDT, Pierre=
DUPONT <[email protected]> wrote:
</div>
<div><br clear=3D"none"></div>
<div><br clear=3D"none"></div>
<div><div dir=3D"ltr">Hello Brent,<br clear=3D"none"><br cl=
ear=3D"none">Thanks for your answer. Unfortunately, I could not make these =
dumps...<br clear=3D"none"><br clear=3D"none">Here comes below what I typed=
, what I got as return and my sTunnel tree (sTunnel and our webservice are =
both hosted on the same machine running W7 64<br clear=3D"none"><br clear=
=3D"none">C:\Program Files (x86)\stunnel>bin\openssl x509 -in config\stu=
nnel.crt -noout -text<br clear=3D"none">unable to load certificate<br clear=
=3D"none">3904:error:0909006C:PEM routines:get_name:no start line:crypto/pe=
m/pem_lib.c:745<br clear=3D"none">:Expecting: TRUSTED CERTIFICATE<br clear=
=3D"none"><br clear=3D"none">C:\Program Files (x86)\stunnel>tree /F<br c=
lear=3D"none">Structure du dossier<br clear=3D"none">Le num=C3=A9ro de s=C3=
=A9rie du volume est 961B-57B7<br clear=3D"none">C:.<br clear=3D"none">=E2=
=94=82 uninstall.exe<br clear=3D"none">=E2=94=82<br clear=3D"none">=
=E2=94=9C=E2=94=80=E2=94=80=E2=94=80bin<br clear=3D"none">=E2=94=82 &=
nbsp; libcrypto-1_1-x64.dll<br clear=3D"none">=E2=94=82  =
; libssl-1_1-x64.dll<br clear=3D"none">=E2=94=82  =
; openssl.exe<br clear=3D"none">=E2=94=82 stunnel.exe=
<br clear=3D"none">=E2=94=82 tstunnel.exe<br clear=3D"=
none">=E2=94=82<br clear=3D"none">=E2=94=9C=E2=94=80=E2=94=80=E2=94=80confi=
g<br clear=3D"none">=E2=94=82 ca-certs.pem<br clear=3D=
"none">=E2=94=82 openssl.cnf<br clear=3D"none">=E2=94=
=82 stunnel.cert<br clear=3D"none">=E2=94=82 &nb=
sp; stunnel.conf<br clear=3D"none">=E2=94=82 s=
tunnel.crt<br clear=3D"none">=E2=94=82 stunnel.pem<br =
clear=3D"none">=E2=94=82 stunnelChrome.cer<br clear=3D=
"none">=E2=94=82<br clear=3D"none">=E2=94=9C=E2=94=80=E2=94=80=E2=94=80doc<=
br clear=3D"none">=E2=94=82 stunnel.html<br clear=3D"n=
one">=E2=94=82<br clear=3D"none">=E2=94=94=E2=94=80=E2=94=80=E2=94=80engine=
s<br clear=3D"none"> capi.dll<br clear=3D"none">=
padlock.dll<br clear=3D"none"> &nb=
sp; pkcs11.dll<br clear=3D"none"><br clear=3D"none">With kind regard=
s from<br clear=3D"none">Pierre Dupont<br clear=3D"none">Support & D=C3=
=A9veloppement for libraries<br clear=3D"none"><br clear=3D"none">Mail =
;: <a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D"nofoll=
ow" target=3D"_blank">[email protected]</a><br clear=3D"none">Phone : &nbs=
p;33 6 13 99 69 38 =E2=80=93 33 1.61.03.03 18<br clear=3D"none">8/10 Chemin=
d=E2=80=99Andr=C3=A9sy<br clear=3D"none">95610 Eragny sur Oise<br clear=3D=
"none"><br clear=3D"none"><br clear=3D"none"><br clear=3D"none"><div class=
=3D"ydpb912aa1fyiv0144117832ydp19fa06f9yqt9882683272" id=3D"ydpb912aa1fyiv0=
144117832ydp19fa06f9yqtfd43787"><br clear=3D"none">-----Message d'origine--=
---<br clear=3D"none">De : Brent Kimberley [mailto:<a shape=3D"rect" h=
ref=3D"mailto:[email protected]" rel=3D"nofollow" target=3D"_blank=
">[email protected]</a>] <br clear=3D"none">Envoy=C3=A9 : ven=
dredi 6 septembre 2019 18:02<br clear=3D"none">=C3=80 : Pierre DUPONT =
<<a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D"nofollo=
w" target=3D"_blank">[email protected]</a>>; <a shape=3D"rect" href=
=3D"mailto:[email protected]" rel=3D"nofollow" target=3D"_blank">st=
[email protected]</a><br clear=3D"none">Cc : Brent Kimberley <=
;<a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D"nofoll=
ow" target=3D"_blank">[email protected]</a>><br clear=3D"none">=
Objet : TR: using sTunnel with Chrome (Pierre DUPONT)<br clear=3D"none=
"><br clear=3D"none">Dump your stunnel.crt file. <br clear=3D"no=
ne"><stunnel_home>/bin/openssl x509 -in stunnel.crt -noout=
-text<br clear=3D"none"><br clear=3D"none">And, compare with <br clea=
r=3D"none">* section 4 of <a shape=3D"rect" href=3D"https://tools.ietf=
.org/html/rfc5280" rel=3D"nofollow" target=3D"_blank">https://tools.ietf.or=
g/html/rfc5280</a><br clear=3D"none">* Peer-reviewed public sites. &nb=
sp;<a shape=3D"rect" href=3D"https://www.ssllabs.com/ssltest/" rel=3D"nofol=
low" target=3D"_blank">https://www.ssllabs.com/ssltest/</a><br clear=3D"non=
e"><br clear=3D"none"><br clear=3D"none">Dump your stunnel.cnf file. =
And, compare with <br clear=3D"none">stunnel_home>/config/openssl.c=
nf file<br clear=3D"none"><a shape=3D"rect" href=3D"https://access.redhat.c=
om/solutions/28965" rel=3D"nofollow" target=3D"_blank">https://access.redha=
t.com/solutions/28965</a><br clear=3D"none"><a shape=3D"rect" href=3D"https=
://www.openssl.org/docs/manmaster/man5/x509v3_config.html" rel=3D"nofollow"=
target=3D"_blank">https://www.openssl.org/docs/manmaster/man5/x509v3_confi=
g.html</a><br clear=3D"none"><br clear=3D"none"><br clear=3D"none">--------=
--------------------------------------------------------------<br clear=3D"=
none"><br clear=3D"none">From: Pierre DUPONT <<a shape=3D"rect" href=3D"=
mailto:[email protected]" rel=3D"nofollow" target=3D"_blank">pierre.du=
[email protected]</a>><br clear=3D"none"><br clear=3D"none">De : Pierre DUPO=
NT<br clear=3D"none">Envoy? : jeudi 5 septembre 2019 16:55<br clear=3D"none=
">Cc : _sav.bibli <<a shape=3D"rect" href=3D"mailto:[email protected]" =
rel=3D"nofollow" target=3D"_blank">[email protected]</a>>; Philippe ANQ=
UETIN <<a shape=3D"rect" href=3D"mailto:[email protected]" rel=
=3D"nofollow" target=3D"_blank">[email protected]</a>><br clear=
=3D"none">Objet : using sTunnel with Chrome<br clear=3D"none"><br clear=3D"=
none">Good day to all. So far, I can't succeed to use Chrome with sTunnel.<=
br clear=3D"none"><br clear=3D"none">Here is my configuration for sTunnel..=
..<br clear=3D"none"><br clear=3D"none">However, I cannot connect on https<=
br clear=3D"none"><br clear=3D"none">I tried several things found browsing =
the list, like building a certificate with<br clear=3D"none">openssl req -n=
ew -x509 -days 365 -nodes -config stunnel.cnf -out stunnel.crt -keyout stun=
nel.crt<br clear=3D"none"><br clear=3D"none">No result so the only solution=
I see now is to call you for some help...<br clear=3D"none"><br clear=3D"n=
one">With kind regards,<br clear=3D"none"><br clear=3D"none"><br clear=3D"n=
one">Cordiales salutations de<br clear=3D"none">Pierre Dupont<br clear=3D"n=
one">Support S.A.V. & D?veloppement Biblioth?ques<br clear=3D"none"><br=
clear=3D"none">Courriel S.A.V. : <a shape=3D"rect" href=3D"mailto:sav=
[email protected]" rel=3D"nofollow" target=3D"_blank">[email protected]</a>&=
lt;mailto:<a shape=3D"rect" href=3D"mailto:[email protected]" rel=3D"nofol=
low" target=3D"_blank">[email protected]</a>><br clear=3D"none">06 13 9=
9 69 38 - 01.61.03.03 18<br clear=3D"none">8/10 Chemin d'Andr?sy<br clear=
=3D"none">95610 Eragny sur Oise<br clear=3D"none">NEDAP LOGO<br clear=3D"no=
ne"><br clear=3D"none"></div></div></div>
</div>
</div></div></div></div></div>
</div>
</div></body></html>
------=_Part_3406194_1769377049.1568127565489--
--===============6600631510445024769==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
--===============6600631510445024769==--