Problems when using PSK between a version of stunnel usingopenssl 1.0 and a version of stunnel using openssl 1.1.1
Hannah Koperberg <[email protected]> Tue, 17 Sep 2019 18:18:13 +0200
| Newsgroups | gmane.network.stunnel.user |
|---|---|
| Message-ID | <[email protected]> |
--===============4013275977307893739==
Content-Type: multipart/alternative;
boundary="_0A75C79F-2036-4D5D-95B7-B5E2F8764777_"
--_0A75C79F-2036-4D5D-95B7-B5E2F8764777_
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset="utf-8"
V2UgZW5jb3VudGVyIHByb2JsZW1zIHdoZW4gdXNpbmcgUFNLIGJldHdlZW4gYSB2ZXJzaW9uIG9m
IHN0dW5uZWwgdXNpbmcgb3BlbnNzbCAxLjAgYW5kIGEgdmVyc2lvbiBvZiBzdHVubmVsIHVzaW5n
IG9wZW5zc2wgMS4xLjENClRoZSBwcm9ibGVtIGJlaW5nIHRoZSBmb2xsb3dpbmc6DQoyMDE5LjA5
LjE2IDEzOjM2OjI4IExPRzZbM106IFBTSyBpZGVudGl0eSBub3QgZm91bmQgKHNlc3Npb24gcmVz
dW1wdGlvbj8pDQoyMDE5LjA5LjE2IDEzOjM2OjI4IExPRzdbM106IFRMUyBhbGVydCAod3JpdGUp
OiBmYXRhbDogdW5rbm93biBQU0sgaWRlbnRpdHkNCjIwMTkuMDkuMTYgMTM6MzY6MjggTE9HM1sz
XTogU1NMX2FjY2VwdDogczNfc3J2ci5jOjI4NDU6IGVycm9yOjE0MDhCMERGOlNTTCByb3V0aW5l
czpzc2wzX2dldF9jbGllbnRfa2V5X2V4Y2hhbmdlOnBzayBpZGVudGl0eSBub3QgZm91bmQNCg0K
Tm8gcHJvYmxlbXMgYXJlIGVuY291bnRlcmVkIHdoZW4gdXNpbmcgY2VydGlmaWNhdGVzIG9yIHdo
ZW4gdGhlIHNhbWUgdmVyc2lvbnMgb2Ygc3R1bm5lbCBhbmQgb3BlbnNzbCBhcmUgdXNlZC4NCklu
IHRoZSBsYXR0ZXIgY2FzZSBuZWl0aGVyIGNlcnRpZmljYXRlcyBub3IgUFNLIGdpdmUgYW55IHBy
b2JsZW1zIGNvbm5lY3RpbmcuDQoNCkkgYW0gc29ycnkgaWYgdGhpcyBoYXMgYmVlbiBwb3N0ZWQg
YmVmb3JlIChjb3VsZCBub3QgZmluZCBhIHNpbWlsYXIgcXVlc3Rpb24pDQpDYW4gYW55b25lIGhl
bHAgbWUgd2l0aCB0aGlzLCBwbGVhc2U/DQpXZSBzZWVtIHRvIGJlIGdldHRpbmcgcHJvYmxlbXMg
d2l0aCBQU0sgb25seSB3aGVuIHVzaW5nIG9wZW5zc2wgMS4wIHZlcnN1cyBvcGVuc3NsIDEuMQ0K
DQpUaGUgb3BlbnNzbCBhbmQgc3R1bm5lbCB2ZXJzaW9ucyBpbnZvbHZlZCBhcmU6DQoNCk9MRCBP
UEVOU1NMIFVTRSBTRVQtVVA6DQoNCm9wZW5zc2wgdmVyc2lvbg0KT3BlblNTTCAxLjAuMnLCoCAy
NiBGZWIgMjAxOQ0KDQpzdHVubmVsIC12ZXJzaW9uDQpzdHVubmVsIDUuNTUgb24gcG93ZXJwYy1p
Ym0tYWl4Ny4yLjIuMCBwbGF0Zm9ybQ0KQ29tcGlsZWQvcnVubmluZyB3aXRoIE9wZW5TU0wgMS4w
LjJywqAgMjYgRmViIDIwMTkNClRocmVhZGluZzpQVEhSRUFEIFNvY2tldHM6UE9MTCxJUHY2IFRM
UzpFTkdJTkUsRklQUyxPQ1NQLFBTSyxTTkkNCkdsb2JhbCBvcHRpb25zOg0KUk5EYnl0ZXPCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgID0gMTAyNA0KUk5EZmlsZcKgwqDCoMKgwqDCoMKgwqDC
oMKgwqDCoMKgwqDCoCA9IC9kZXYvdXJhbmRvbQ0KUk5Eb3ZlcndyaXRlwqDCoMKgwqDCoMKgwqDC
oMKgwqAgPSB5ZXMNClNlcnZpY2UtbGV2ZWwgb3B0aW9uczoNCmNpcGhlcnPCoMKgwqDCoMKgwqDC
oMKgwqDCoMKgwqDCoMKgwqAgPSBGSVBTICh3aXRoICJmaXBzID0geWVzIikNCmNpcGhlcnPCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPSBISUdIOiFhTlVMTDohU1NMdjI6IURIOiFrREhF
UFNLICh3aXRoICJmaXBzID0gbm8iKQ0KY3VydmVzwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC
oMKgwqAgPSBwcmltZTI1NnYxDQpkZWJ1Z8KgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg
wqAgPSBkYWVtb24ubm90aWNlDQpsb2dJZMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg
wqAgPSBzZXF1ZW50aWFsDQpvcHRpb25zwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgID0g
Tk9fU1NMdjINCm9wdGlvbnPCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPSBOT19TU0x2
Mw0Kc2Vzc2lvbkNhY2hlU2l6ZcKgwqDCoMKgwqDCoCA9IDEwMDANCnNlc3Npb25DYWNoZVRpbWVv
dXTCoMKgwqAgPSAzMDAgc2Vjb25kcw0Kc3RhY2vCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKg
wqDCoMKgID0gNjU1MzYgYnl0ZXMNClRJTUVPVVRidXN5wqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA9
IDMwMCBzZWNvbmRzDQpUSU1FT1VUY2xvc2XCoMKgwqDCoMKgwqDCoMKgwqDCoCA9IDYwIHNlY29u
ZHMNClRJTUVPVVRjb25uZWN0wqDCoMKgwqDCoMKgwqDCoCA9IDEwIHNlY29uZHMNClRJTUVPVVRp
ZGxlwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA9IDQzMjAwIHNlY29uZHMNCnZlcmlmecKgwqDCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgID0g
bm9uZQ0KTkVXIE9QRU5TU0wgVVNFIFNFVC1VUDoNCg0Kb3BlbnNzbCB2ZXJzaW9uDQpPcGVuU1NM
IDEuMS4xY8KgIDI4IE1heSAyMDE5DQpTdHVubmVsIC12ZXJzaW9uDQpzdHVubmVsIDUuNTQgb24g
cG93ZXJwYy1pYm0tYWl4Ny4yLjIuMCBwbGF0Zm9ybQ0KQ29tcGlsZWQvcnVubmluZyB3aXRoIE9w
ZW5TU0wgMS4xLjFjwqAgMjggTWF5IDIwMTkNClRocmVhZGluZzpQVEhSRUFEIFNvY2tldHM6UE9M
TCxJUHY2IFRMUzpFTkdJTkUsRklQUyxPQ1NQLFBTSyxTTkkNCkdsb2JhbCBvcHRpb25zOg0KUk5E
Ynl0ZXPCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgID0gMTAyNA0KUk5EZmlsZcKgwqDCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA9IC9kZXYvdXJhbmRvbQ0KUk5Eb3ZlcndyaXRlwqDCoMKg
wqDCoMKgwqDCoMKgwqAgPSB5ZXMNClNlcnZpY2UtbGV2ZWwgb3B0aW9uczoNCmNpcGhlcnPCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPSBGSVBTICh3aXRoICJmaXBzID0geWVzIikNCmNp
cGhlcnPCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPSBISUdIOiFhTlVMTDohU1NMdjI6
IURIOiFrREhFUFNLICh3aXRoICJmaXBzID0gbm8iKQ0KY2lwaGVyc3VpdGVzwqDCoMKgwqDCoMKg
wqDCoMKgwqAgPSBUTFNfQ0hBQ0hBMjBfUE9MWTEzMDVfU0hBMjU2OlRMU19BRVNfMjU2X0dDTV9T
SEEzODQ6VExTX0FFU18xMjhfR0NNX1NIQTI1NiAod2l0aCBUTFN2MS4zKQ0KY3VydmVzwqDCoMKg
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPSBYMjU1MTk6UC0yNTY6WDQ0ODpQLTUyMTpQLTM4
NA0KZGVidWfCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgID0gZGFlbW9uLm5vdGlj
ZQ0KbG9nSWTCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgID0gc2VxdWVudGlhbA0K
b3B0aW9uc8KgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA9IE5PX1NTTHYyDQpvcHRpb25z
wqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgID0gTk9fU1NMdjMNCnNlc3Npb25DYWNoZVNp
emXCoMKgwqDCoMKgwqAgPSAxMDAwDQpzZXNzaW9uQ2FjaGVUaW1lb3V0wqDCoMKgID0gMzAwIHNl
Y29uZHMNCnN0YWNrwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCA9IDY1NTM2IGJ5
dGVzDQpUSU1FT1VUYnVzecKgwqDCoMKgwqDCoMKgwqDCoMKgwqAgPSAzMDAgc2Vjb25kcw0KVElN
RU9VVGNsb3NlwqDCoMKgwqDCoMKgwqDCoMKgwqAgPSA2MCBzZWNvbmRzDQpUSU1FT1VUY29ubmVj
dMKgwqDCoMKgwqDCoMKgwqAgPSAxMCBzZWNvbmRzDQpUSU1FT1VUaWRsZcKgwqDCoMKgwqDCoMKg
wqDCoMKgwqAgPSA0MzIwMCBzZWNvbmRzDQp2ZXJpZnnCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDC
oMKgwqDCoCA9IG5vbmUNCkJvdGggc3R1bm5lbCB2ZXJzaW9ucyBydW4gb24gdGhlIHNhbWUgQUlY
IHBsYXRmb3JtIChJZGVudGljYWwgT1MpDQoNClRoZSBzZXR1cHMgYXJlOg0KU0VSVkVSIFNFVC1V
UCBGT1IgU1RVTk5FTCBVU0lORyBPUEVOU1NMIDEuMC4yLlIgOg0KDQpkZWJ1Z8KgwqDCoMKgwqAg
PSBkZWJ1Zw0Kc3lzbG9nwqDCoMKgwqAgPSBubw0Kb3V0cHV0wqDCoMKgwqAgPSAvcGF0aC90by9s
b2dmaWxlDQpsb2fCoMKgwqDCoMKgwqDCoCA9IGFwcGVuZA0KcGlkwqDCoMKgwqDCoMKgwqAgPSAv
cGF0aC90by9waWRmaWxlDQpjZXJ0wqDCoMKgwqDCoMKgID0gL3BhdGgvdG8vY2VydA0Ka2V5wqDC
oMKgwqDCoMKgwqAgPSAvcGF0aC90by9rZXkNCkNBRmlsZcKgwqDCoMKgID0gL3BhdGgvdG8vQ0Fm
aWxlDQpDQVBhdGjCoMKgwqDCoCA9IC9wYXRoL3RvL0NBZGlyDQpQU0tzZWNyZXRzID0gL3BhdGgv
dG8vUFNLZmlsZQ0KDQpbSGtMaXN0ZW5lclNTTF0NCmNsaWVudMKgwqDCoMKgwqAgPSBubw0KdmVy
aWZ5Q2hhaW4gPSB5ZXMNCnZlcmlmeVBlZXLCoCA9IHllcw0KYWNjZXB0wqAgPSAwLjAuMC4wOjk5
OTkNCmNvbm5lY3QgPSBsb2NhbGhvc3Q6MjUyNTANCg0KW0hrTGlzdGVuZXJQU0tPMDEyXQ0KY2xp
ZW50wqDCoMKgwqDCoCA9IG5vDQphY2NlcHTCoMKgwqDCoMKgID0gMC4wLjAuMDo5OTk4DQpjb25u
ZWN0ID0gbG9jYWxob3N0OjI1MjUwDQpjaXBoZXJzwqDCoMKgID0gUFNLDQoNCkNMSUVOVCBTRVQt
VVAgRk9SIFNUVU5ORUwgVVNJTkcgT1BFTlNTTCAxLjAuMi5SIDoNCmRlYnVnwqDCoMKgwqDCoCA9
IGRlYnVnDQpzeXNsb2fCoMKgwqDCoCA9IG5vDQpvdXRwdXTCoMKgwqDCoCA9IC9wYXRoL3RvL2xv
Z2ZpbGUNCmxvZ8KgwqDCoMKgwqDCoMKgID0gYXBwZW5kDQpwaWTCoMKgwqDCoMKgwqDCoCA9IC9w
YXRoL3RvL3BpZGZpbGUNCmNlcnTCoMKgwqDCoMKgwqAgPSAvcGF0aC90by9jZXJ0DQprZXnCoMKg
wqDCoMKgwqDCoCA9IC9wYXRoL3RvL2tleQ0KQ0FGaWxlwqDCoMKgwqAgPSAvcGF0aC90by9DQWZp
bGUNCkNBUGF0aMKgwqDCoMKgID0gL3BhdGgvdG8vQ0FkaXINClBTS3NlY3JldHMgPSAvcGF0aC90
by9QU0tmaWxlDQoNCltIa0xpc3RlbmVyU1NMXQ0KY2xpZW50wqDCoMKgwqDCoCA9IHllcw0KdmVy
aWZ5Q2hhaW4gPSB5ZXMNCnZlcmlmeVBlZXLCoCA9IHllcw0KYWNjZXB0wqAgPSAwLjAuMC4wOjEx
MTkNCmNvbm5lY3QgPSBsb2NhbGhvc3Q6OTk5OQ0KDQpbSGtMaXN0ZW5lclBTS08wMTNdDQpjbGll
bnTCoMKgwqDCoMKgID0geWVzDQphY2NlcHTCoMKgwqDCoMKgID0gMC4wLjAuMDoxMTE4DQpjb25u
ZWN0ID0gbG9jYWxob3N0Ojk5OTgNCmNpcGhlcnPCoMKgwqAgPSBQU0sNCg0KUFNLRmlsZSBmb3Ig
c2VydmVyIGFuZCBjbGllbnQgY29udGVudDoNCkhrTGlzdGVuZXJQU0tPMDEyOlpPT3pNTFJPbjUr
WHk2UEovbHduQ2d5NWxxK0FrN09oT0ZTMnM2dmo0T1UNCkhrTGlzdGVuZXJQU0tPMDEzOlpPT3pN
TFJPbjUrWHk2UEovbHduQ2d5NWxxK0FrN09oT0ZTMnM2dmo0T1UNCg0KDQpTRVJWRVIgU0VULVVQ
IEZPUiBTVFVOTkVMIFVTSU5HIE9QRU5TU0wgMS4xLjEuYyA6DQpkZWJ1Z8KgwqDCoMKgwqAgPSBk
ZWJ1Zw0Kc3lzbG9nwqDCoMKgwqAgPSBubw0Kb3V0cHV0wqDCoMKgwqAgPSAvcGF0aC90by9sb2dm
aWxlDQpsb2fCoMKgwqDCoMKgwqDCoCA9IGFwcGVuZA0KcGlkwqDCoMKgwqDCoMKgwqAgPSAvcGF0
aC90by9waWRmaWxlDQpjZXJ0wqDCoMKgwqDCoMKgID0gL3BhdGgvdG8vY2VydA0Ka2V5wqDCoMKg
wqDCoMKgwqAgPSAvcGF0aC90by9rZXkNCkNBRmlsZcKgwqDCoMKgID0gL3BhdGgvdG8vQ0FmaWxl
DQpDQVBhdGjCoMKgwqDCoCA9IC9wYXRoL3RvL0NBZGlyDQpQU0tzZWNyZXRzID0gL3BhdGgvdG8v
UFNLZmlsZQ0Kc3NsVmVyc2lvbk1pbiA9IFRMU3YxDQpzc2xWZXJzaW9uTWF4ID0gVExTdjEuMg0K
DQoNCltIa0xpc3RlbmVyU1NMXQ0KY2xpZW50wqDCoMKgwqDCoCA9IG5vDQp2ZXJpZnlDaGFpbiA9
IHllcw0KdmVyaWZ5UGVlcsKgID0geWVzDQphY2NlcHTCoMKgwqDCoMKgID0gMC4wLjAuMDo5OTk5
DQpjb25uZWN0wqDCoMKgwqAgPSBsb2NhbGhvc3Q6MjUyNTANCg0KW0hrTGlzdGVuZXJQU0tPMDQ4
XQ0KY2xpZW50wqDCoMKgwqDCoCA9IG5vDQphY2NlcHTCoMKgwqDCoMKgID0gMC4wLjAuMDo5OTk4
DQpjb25uZWN0wqDCoMKgwqAgPSBsb2NhbGhvc3Q6MjUyNTANCmNpcGhlcnPCoMKgwqDCoCA9IFBT
Sw0KDQpDTElFTlQgU0VULVVQIEZPUiBTVFVOTkVMIFVTSU5HIE9QRU5TU0wgMS4xLjEuYyA6DQpk
ZWJ1Z8KgwqDCoMKgwqAgPSBkZWJ1Zw0Kc3lzbG9nwqDCoMKgwqAgPSBubw0Kb3V0cHV0wqDCoMKg
wqAgPSAvcGF0aC90by9sb2dmaWxlDQpsb2fCoMKgwqDCoMKgwqDCoCA9IGFwcGVuZA0KcGlkwqDC
oMKgwqDCoMKgwqAgPSAvcGF0aC90by9waWRmaWxlDQpjZXJ0wqDCoMKgwqDCoMKgID0gL3BhdGgv
dG8vY2VydA0Ka2V5wqDCoMKgwqDCoMKgwqAgPSAvcGF0aC90by9rZXkNCkNBRmlsZcKgwqDCoMKg
ID0gL3BhdGgvdG8vQ0FmaWxlDQpDQVBhdGjCoMKgwqDCoCA9IC9wYXRoL3RvL0NBZGlyDQpQU0tz
ZWNyZXRzID0gL3BhdGgvdG8vUFNLZmlsZQ0Kc3NsVmVyc2lvbk1pbiA9IFRMU3YxDQpzc2xWZXJz
aW9uTWF4ID0gVExTdjEuMg0KDQoNCltIa0xpc3RlbmVyU1NMXQ0KY2xpZW50wqDCoMKgwqDCoCA9
IHllcw0KdmVyaWZ5Q2hhaW4gPSB5ZXMNCnZlcmlmeVBlZXLCoCA9IHllcw0KYWNjZXB0wqDCoMKg
wqDCoCA9IGxvY2FsaG9zdDo0NDQ5DQpjb25uZWN0wqDCoMKgwqAgPSBkcmVwczo5OTk5DQoNCltI
a0xpc3RlbmVyUFNLTzA0N10NCmNsaWVudMKgwqDCoMKgwqAgPSB5ZXMNCmFjY2VwdMKgwqDCoMKg
wqAgPSBsb2NhbGhvc3Q6NDQ0OA0KY29ubmVjdMKgwqDCoMKgID0gZHJlcHM6OTk5OA0KY2lwaGVy
c8KgwqDCoMKgID0gUFNLDQoNCg0KUFNLRmlsZSBmb3Igc2VydmVyIGFuZCBjbGllbnQgc2V0LXVw
Og0KSGtMaXN0ZW5lclBTS08wNDc6Wk9Pek1MUk9uNStYeTZQSi9sd25DZ3k1bHErQWs3T2hPRlMy
czZ2ajRPVQ0KSGtMaXN0ZW5lclBTS08wNDg6Wk9Pek1MUk9uNStYeTZQSi9sd25DZ3k1bHErQWs3
T2hPRlMyczZ2ajRPVQ0KDQpJdCBnb2VzIHdpdGhvdXQgc2F5aW5nIHRoYXQgb25seSBvbmUgb2Yg
dGhlIHR3byBzZXJ2ZXIgc2V0LXVwcyBjYW4gYmUgYWN0aXZlIGR1cmluZyB0ZXN0aW5nIA0KDQpX
ZWxsLCB0aGF0IGlzIHRoZSBlbmQgb2YgbXnigJlzbWFsbOKAmSBtYWlsIPCfmIkNCg0KS2luZCBy
ZWdhcmRzLA0KSGFubmFoIEtvcGVyYmVyZywgZGUgVm9sa3NiYW5rIGluIHRoZSBOZXRoZXJsYW5k
cw0KDQ0NDQ0NDQoNCg0KDQo=
--_0A75C79F-2036-4D5D-95B7-B5E2F8764777_
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns:m=3D"http://schemas.microsoft.com/of=
fice/2004/12/omml" xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta ht=
tp-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta name=
=3DGenerator content=3D"Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=3DNL link=3Dblue vlink=3D"#954F72"><div class=
=3DWordSection1><p class=3DMsoNormal><span lang=3DEN-US>We encounter proble=
ms when using PSK between a version of stunnel using openssl 1.0 and a vers=
ion of stunnel using openssl 1.1.1<o:p></o:p></span></p><p class=3DMsoNorma=
l><span lang=3DEN-US>The problem being the following:<o:p></o:p></span></p>=
<p class=3DMsoNormal><span lang=3DEN-US>2019.09.16 13:36:28 LOG6[3]: PSK id=
entity not found (session resumption?)<o:p></o:p></span></p><p class=3DMsoN=
ormal><span lang=3DEN-US>2019.09.16 13:36:28 LOG7[3]: TLS alert (write): fa=
tal: unknown PSK identity<o:p></o:p></span></p><p class=3DMsoNormal><span l=
ang=3DEN-US>2019.09.16 13:36:28 LOG3[3]: SSL_accept: s3_srvr.c:2845: error:=
1408B0DF:SSL routines:ssl3_get_client_key_exchange:psk identity not found<o=
:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US><o:p> </o:=
p></span></p><p class=3DMsoNormal><span lang=3DEN-US>No problems are encoun=
tered when using certificates or when the same versions of stunnel and open=
ssl are used.<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US>=
In the latter case neither certificates nor PSK give any problems connectin=
g.<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US><o:p> =
</o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US>I am sorry if this=
has been posted before (could not find a similar question)<o:p></o:p></spa=
n></p><p class=3DMsoNormal><span lang=3DEN-US>Can anyone help me with this,=
please?<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US>We se=
em to be getting problems with PSK only when using openssl 1.0 versus opens=
sl 1.1<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US><o:p>&n=
bsp;</o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US>The openssl an=
d stunnel versions involved are:<o:p></o:p></span></p><p class=3DMsoNormal>=
<span lang=3DEN-US><o:p> </o:p></span></p><p class=3DMsoNormal><span l=
ang=3DEN-US>OLD OPENSSL USE SET-UP:<o:p></o:p></span></p><p class=3DMsoNorm=
al><span lang=3DEN-US><o:p> </o:p></span></p><p class=3DMsoNormal><b><=
span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-farea=
st-language:NL'>openssl version<o:p></o:p></span></b></p><p class=3DMsoNorm=
al><b><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";ms=
o-fareast-language:NL'>OpenSSL 1.0.2r 26 Feb 2019<o:p></o:p></span></=
b></p><p class=3DMsoNormal><b><span lang=3DEN style=3D'font-size:8.0pt;font=
-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></b>=
</p><p class=3DMsoNormal><b><span lang=3DEN style=3D'font-size:8.0pt;font-f=
amily:"Courier New";mso-fareast-language:NL'>s</span></b><span lang=3DEN st=
yle=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>t=
unnel -version<br><b>stunnel 5.55 on powerpc-ibm-aix7.2.2.0 platform<br>Com=
piled/running with OpenSSL 1.0.2r 26 Feb 2019</b><br>Threading:PTHREA=
D Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI<o:p></o:p></span></p><p cl=
ass=3DMsoNormal style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto=
'><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fa=
reast-language:NL'>Global options:<br>RNDbytes  =
; =3D 1024<br>RNDfile=
&nb=
sp; =3D /dev/urandom<br>RNDoverwrite &nb=
sp; =3D yes<o:p></o:p></span></p><p class=3DM=
soNormal style=3D'mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span=
lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-l=
anguage:NL'>Service-level options:<br>ciphers =
=3D FIPS (with=
"fips =3D yes")<br>ciphers &n=
bsp; =3D HIGH:!aNULL:!SSLv2=
:!DH:!kDHEPSK (with "fips =3D no")<br><b>curves =
&nb=
sp; =3D prime256v1<br></b>debug &n=
bsp; =3D daemon.notic=
e<br>logId  =
; =3D sequential<br><b>options &nb=
sp; =
=3D NO_SSLv2<br>options &nb=
sp; =3D NO_SSLv3<br></b>sessionCa=
cheSize =3D 1000<br>sessionCacheTimeout=
=3D 300 seconds<br>stack &n=
bsp; =3D =
65536 bytes<br>TIMEOUTbusy &=
nbsp; =3D 300 seconds<br>TIMEOUTclose &n=
bsp; =3D 60 seconds<br>TIMEOUTconnect &n=
bsp; =3D 10 seconds<br>TIMEOUTidle =
; =3D 43200 sec=
onds<br>verify</span><span lang=3DEN style=3D'mso-fareast-language:NL'>&nbs=
p; &=
nbsp; &nbs=
p; </span><span lang=3DEN style=3D'font-size:=
8.0pt;font-family:"Courier New";mso-fareast-language:NL'>=3D none</span><sp=
an lang=3DEN style=3D'mso-fareast-language:NL'><o:p></o:p></span></p><p cla=
ss=3DMsoNormal><span lang=3DEN>NEW OPENSSL USE SET-UP:<o:p></o:p></span></p=
><p class=3DMsoNormal><span lang=3DEN><o:p> </o:p></span></p><p class=
=3DMsoNormal><b><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Couri=
er New";mso-fareast-language:NL'>openssl version<o:p></o:p></span></b></p><=
p class=3DMsoNormal><b><span lang=3DEN style=3D'font-size:8.0pt;font-family=
:"Courier New";mso-fareast-language:NL'>OpenSSL 1.1.1c 28 May 2019<o:=
p></o:p></span></b></p><p class=3DMsoNormal style=3D'mso-margin-top-alt:aut=
o;mso-margin-bottom-alt:auto'><span lang=3DEN style=3D'font-size:8.0pt;font=
-family:"Courier New";mso-fareast-language:NL'>Stunnel -version<br><b>stunn=
el 5.54 on powerpc-ibm-aix7.2.2.0 platform<br>Compiled/running with OpenSSL=
1.1.1c 28 May 2019<br></b>Threading:PTHREAD Sockets:POLL,IPv6 TLS:EN=
GINE,FIPS,OCSP,PSK,SNI<o:p></o:p></span></p><p class=3DMsoNormal style=3D'm=
so-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=3DEN style=3D=
'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>Global =
options:<br>RNDbytes &=
nbsp; =3D 1024<br>RNDfile &n=
bsp; =3D /dev/u=
random<br>RNDoverwrite  =
; =3D yes<o:p></o:p></span></p><p class=3DMsoNormal style=3D'mso-marg=
in-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=3DEN style=3D'font-s=
ize:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>Service-level =
options:<br>ciphers &n=
bsp; =3D FIPS (with "fips =3D yes")=
<br>ciphers &nbs=
p; =3D HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK (with "=
fips =3D no")<br><b>ciphersuites &n=
bsp; =3D TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA=
384:TLS_AES_128_GCM_SHA256 (with TLSv1.3)<br>curves =
=
=3D X25519:P-256:X448:P-521:P-384<br></b>debug  =
; =
=3D daemon.notice<br>logId &=
nbsp; =3D sequential<br><b>=
options &n=
bsp; =3D NO_SSLv2<br>options  =
; =3D NO_SSLv3<=
br></b>sessionCacheSize =3D 1000<br>ses=
sionCacheTimeout =3D 300 seconds<br>stack &nbs=
p; &=
nbsp; =3D 65536 bytes<br>TIMEOUTbusy &nb=
sp; =3D 300 seconds<br>TIMEOUTclose &nbs=
p; =3D 60 seconds<br>TIMEOU=
Tconnect =3D 10 seconds<br>=
TIMEOUTidle &nbs=
p; =3D 43200 seconds<br>verify &nb=
sp; =3D none<o:p></o:p></sp=
an></p><p class=3DMsoNormal><span lang=3DEN>Both stunnel versions run on th=
e same AIX platform (Identical OS)<o:p></o:p></span></p><p class=3DMsoNorma=
l><span lang=3DEN><o:p> </o:p></span></p><p class=3DMsoNormal><span la=
ng=3DEN>The setups are:<o:p></o:p></span></p><p class=3DMsoNormal><span lan=
g=3DEN>SERVER SET-UP FOR STUNNEL USING OPENSSL 1.0.2.R :<o:p></o:p></span><=
/p><p class=3DMsoNormal><span lang=3DEN><o:p> </o:p></span></p><p clas=
s=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier=
New";mso-fareast-language:NL'>debug =3D debu=
g<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-s=
ize:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>syslog &n=
bsp; =3D no<o:p></o:p></span></p><p class=3DMsoNormal><span lan=
g=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langu=
age:NL'>output =3D /path/to/logfile<o:p></o:p></spa=
n></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-fa=
mily:"Courier New";mso-fareast-language:NL'>log &nbs=
p; =3D append<o:p></o:p></span></p><p class=3DMsoNormal><span l=
ang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-lan=
guage:NL'>pid =3D /path/to/pidfil=
e<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-s=
ize:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>cert &nbs=
p; =3D /path/to/cert<o:p></o:p></span></p><p class=
=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier =
New";mso-fareast-language:NL'>key =
=3D /path/to/key<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN=
style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL=
'>CAFile =3D /path/to/CAfile<o:p></o:p></span></p><=
p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"C=
ourier New";mso-fareast-language:NL'>CAPath =3D /pa=
th/to/CAdir<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>PSKs=
ecrets =3D /path/to/PSKfile<o:p></o:p></span></p><p class=3DMsoNormal><span=
lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-l=
anguage:NL'><o:p> </o:p></span></p><p class=3DMsoNormal><span lang=3DE=
N style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:N=
L'>[HkListenerSSL]<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DE=
N style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:N=
L'>client =3D no<o:p></o:p></span></p><p clas=
s=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier=
New";mso-fareast-language:NL'>verifyChain =3D yes<o:p></o:p></span></p><p =
class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Cou=
rier New";mso-fareast-language:NL'>verifyPeer =3D yes<o:p></o:p></spa=
n></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-fa=
mily:"Courier New";mso-fareast-language:NL'>accept =3D 0.0.0.0:9999<o=
:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size=
:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect =3D local=
host:25250<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p=
> </o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-=
size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerPS=
KO012]<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'f=
ont-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>client&nb=
sp; =3D no<o:p></o:p></span></p><p class=3DMsoNorma=
l><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fa=
reast-language:NL'>accept =3D 0.0.0.0:9998<o:=
p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:=
8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect =3D localh=
ost:25250<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>ciph=
ers =3D PSK<o:p></o:p></span></p><p class=3DMsoNormal><sp=
an lang=3DEN><o:p> </o:p></span></p><p class=3DMsoNormal><span lang=3D=
EN>CLIENT SET-UP FOR STUNNEL USING OPENSSL 1.0.2.R :<o:p></o:p></span></p><=
p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"C=
ourier New";mso-fareast-language:NL'>debug =
=3D debug<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>sysl=
og =3D no<o:p></o:p></span></p><p class=3DMsoNormal=
><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-far=
east-language:NL'>output =3D /path/to/logfile<o:p><=
/o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0=
pt;font-family:"Courier New";mso-fareast-language:NL'>log =
=3D append<o:p></o:p></span></p><p class=3DMsoNorm=
al><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-f=
areast-language:NL'>pid =3D /path=
/to/pidfile<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>cert=
=3D /path/to/cert<o:p></o:p></span></p=
><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:=
"Courier New";mso-fareast-language:NL'>key &nb=
sp; =3D /path/to/key<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-la=
nguage:NL'>CAFile =3D /path/to/CAfile<o:p></o:p></s=
pan></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-=
family:"Courier New";mso-fareast-language:NL'>CAPath  =
; =3D /path/to/CAdir<o:p></o:p></span></p><p class=3DMsoNormal><span lang=
=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langua=
ge:NL'>PSKsecrets =3D /path/to/PSKfile<o:p></o:p></span></p><p class=3DMsoN=
ormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";ms=
o-fareast-language:NL'><o:p> </o:p></span></p><p class=3DMsoNormal><sp=
an lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast=
-language:NL'>[HkListenerSSL]<o:p></o:p></span></p><p class=3DMsoNormal><sp=
an lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast=
-language:NL'>client =3D yes<o:p></o:p></span=
></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-fam=
ily:"Courier New";mso-fareast-language:NL'>verifyChain =3D yes<o:p></o:p></=
span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font=
-family:"Courier New";mso-fareast-language:NL'>verifyPeer =3D yes<o:p=
></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8=
.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept =3D 0.=
0.0.0:1119<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>conn=
ect =3D localhost:9999<o:p></o:p></span></p><p class=3DMsoNormal><span lang=
=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langua=
ge:NL'><o:p> </o:p></span></p><p class=3DMsoNormal><span lang=3DEN sty=
le=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[H=
kListenerPSKO013]<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN=
style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL=
'>client =3D yes<o:p></o:p></span></p><p clas=
s=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier=
New";mso-fareast-language:NL'>accept =3D 0.0=
.0.0:1118<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>conn=
ect =3D localhost:9998<o:p></o:p></span></p><p class=3DMsoNormal><span lang=
=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langua=
ge:NL'>ciphers =3D PSK<o:p></o:p></span></p><p class=3DMs=
oNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";=
mso-fareast-language:NL'><o:p> </o:p></span></p><p class=3DMsoNormal><=
span lang=3DEN>PSKFile for server and client content:<o:p></o:p></span></p>=
<p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"=
Courier New";mso-fareast-language:NL'>HkListenerPSKO012:ZOOzMLROn5+Xy6PJ/lw=
nCgy5lq+Ak7OhOFS2s6vj4OU<o:p></o:p></span></p><p class=3DMsoNormal><span la=
ng=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-lang=
uage:NL'>HkListenerPSKO013:ZOOzMLROn5+Xy6PJ/lwnCgy5lq+Ak7OhOFS2s6vj4OU<o:p>=
</o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.=
0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> </o:p></s=
pan></p><p class=3DMsoNormal><span lang=3DEN><o:p> </o:p></span></p><p=
class=3DMsoNormal><span lang=3DEN>SERVER SET-UP FOR STUNNEL USING OPENSSL =
1.1.1.c :<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>debu=
g =3D debug<o:p></o:p></span></p><p class=3DM=
soNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New"=
;mso-fareast-language:NL'>syslog =3D no<o:p></o:p><=
/span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;fon=
t-family:"Courier New";mso-fareast-language:NL'>output &nb=
sp; =3D /path/to/logfile<o:p></o:p></span></p><p class=3DMsoNormal><span la=
ng=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-lang=
uage:NL'>log =3D append<o:p></o:p=
></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;f=
ont-family:"Courier New";mso-fareast-language:NL'>pid &nbs=
p; =3D /path/to/pidfile<o:p></o:p></span></p><p class=3DM=
soNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New"=
;mso-fareast-language:NL'>cert =3D /pat=
h/to/cert<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>key&=
nbsp; =3D /path/to/key<o:p></o:p></span=
></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-fam=
ily:"Courier New";mso-fareast-language:NL'>CAFile =
=3D /path/to/CAfile<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3D=
EN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:=
NL'>CAPath =3D /path/to/CAdir<o:p></o:p></span></p>=
<p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"=
Courier New";mso-fareast-language:NL'>PSKsecrets =3D /path/to/PSKfile<o:p><=
/o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0=
pt;font-family:"Courier New";mso-fareast-language:NL'>sslVersionMin =3D TLS=
v1<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-=
size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>sslVersionMax=
=3D TLSv1.2<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN styl=
e=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:=
p> </o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font=
-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'><o:p> <=
/o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0=
pt;font-family:"Courier New";mso-fareast-language:NL'>[HkListenerSSL]<o:p><=
/o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0=
pt;font-family:"Courier New";mso-fareast-language:NL'>client &nb=
sp; =3D no<o:p></o:p></span></p><p class=3DMsoNormal><span lang=
=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langua=
ge:NL'>verifyChain =3D yes<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-la=
nguage:NL'>verifyPeer =3D yes<o:p></o:p></span></p><p class=3DMsoNorm=
al><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-f=
areast-language:NL'>accept =3D 0.0.0.0:9999<o=
:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size=
:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>connect &nbs=
p; =3D localhost:25250<o:p></o:p></span></p><p class=3DMsoNorma=
l><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fa=
reast-language:NL'><o:p> </o:p></span></p><p class=3DMsoNormal><span l=
ang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-lan=
guage:NL'>[HkListenerPSKO048]<o:p></o:p></span></p><p class=3DMsoNormal><sp=
an lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast=
-language:NL'>client =3D no<o:p></o:p></span>=
</p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-fami=
ly:"Courier New";mso-fareast-language:NL'>accept &nb=
sp; =3D 0.0.0.0:9998<o:p></o:p></span></p><p class=3DMsoNormal><span lang=
=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langua=
ge:NL'>connect =3D localhost:25250<o:p></o:p></span=
></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-fam=
ily:"Courier New";mso-fareast-language:NL'>ciphers =
=3D PSK<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN-US><o:p>&=
nbsp;</o:p></span></p><p class=3DMsoNormal><span lang=3DEN>CLIENT SET-UP FO=
R STUNNEL USING OPENSSL 1.1.1.c :<o:p></o:p></span></p><p class=3DMsoNormal=
><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-far=
east-language:NL'>debug =3D debug<o:p></o:p><=
/span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;fon=
t-family:"Courier New";mso-fareast-language:NL'>syslog &nb=
sp; =3D no<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=
=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>outp=
ut =3D /path/to/logfile<o:p></o:p></span></p><p cla=
ss=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courie=
r New";mso-fareast-language:NL'>log &nbs=
p; =3D append<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN sty=
le=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>pi=
d =3D /path/to/pidfile<o:p></o:p>=
</span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;fo=
nt-family:"Courier New";mso-fareast-language:NL'>cert &nbs=
p; =3D /path/to/cert<o:p></o:p></span></p><p class=3DMsoNormal>=
<span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fare=
ast-language:NL'>key =3D /path/to=
/key<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'fon=
t-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>CAFile =
; =3D /path/to/CAfile<o:p></o:p></span></p><p class=3DMso=
Normal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";m=
so-fareast-language:NL'>CAPath =3D /path/to/CAdir<o=
:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size=
:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>PSKsecrets =3D /p=
ath/to/PSKfile<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN st=
yle=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>s=
slVersionMin =3D TLSv1<o:p></o:p></span></p><p class=3DMsoNormal><span lang=
=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langua=
ge:NL'>sslVersionMax =3D TLSv1.2<o:p></o:p></span></p><p class=3DMsoNormal>=
<span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fare=
ast-language:NL'><o:p> </o:p></span></p><p class=3DMsoNormal><span lan=
g=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langu=
age:NL'><o:p> </o:p></span></p><p class=3DMsoNormal><span lang=3DEN st=
yle=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>[=
HkListenerSSL]<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN st=
yle=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>c=
lient =3D yes<o:p></o:p></span></p><p class=
=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier =
New";mso-fareast-language:NL'>verifyChain =3D yes<o:p></o:p></span></p><p c=
lass=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Cour=
ier New";mso-fareast-language:NL'>verifyPeer =3D yes<o:p></o:p></span=
></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-fam=
ily:"Courier New";mso-fareast-language:NL'>accept &n=
bsp; =3D localhost:4449<o:p></o:p></span></p><p class=3DMsoNormal><span lan=
g=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-langu=
age:NL'>connect =3D dreps:9999<o:p></o:p></span></p=
><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:=
"Courier New";mso-fareast-language:NL'><o:p> </o:p></span></p><p class=
=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier =
New";mso-fareast-language:NL'>[HkListenerPSKO047]<o:p></o:p></span></p><p c=
lass=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Cour=
ier New";mso-fareast-language:NL'>client =3D =
yes<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font=
-size:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>accept =
=3D localhost:4448<o:p></o:p></span></p><p class=
=3DMsoNormal><span lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier =
New";mso-fareast-language:NL'>connect =3D dreps:999=
8<o:p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-s=
ize:8.0pt;font-family:"Courier New";mso-fareast-language:NL'>ciphers &=
nbsp; =3D PSK<o:p></o:p></span></p><p class=3DMsoNormal><span l=
ang=3DEN><o:p> </o:p></span></p><p class=3DMsoNormal><span lang=3DEN><=
o:p> </o:p></span></p><p class=3DMsoNormal><span lang=3DEN>PSKFile for=
server and client set-up:<o:p></o:p></span></p><p class=3DMsoNormal><span =
lang=3DEN style=3D'font-size:8.0pt;font-family:"Courier New";mso-fareast-la=
nguage:NL'>HkListenerPSKO047:ZOOzMLROn5+Xy6PJ/lwnCgy5lq+Ak7OhOFS2s6vj4OU<o:=
p></o:p></span></p><p class=3DMsoNormal><span lang=3DEN style=3D'font-size:=
8.0pt;font-family:"Courier New";mso-fareast-language:NL'>HkListenerPSKO048:=
ZOOzMLROn5+Xy6PJ/lwnCgy5lq+Ak7OhOFS2s6vj4OU<o:p></o:p></span></p><p class=
=3DMsoNormal style=3D'margin-bottom:12.0pt'><span style=3D'font-size:10.0pt=
;font-family:"Arial",sans-serif;mso-fareast-language:NL'><o:p> </o:p><=
/span></p><p class=3DMsoNormal style=3D'margin-bottom:12.0pt'><span lang=3D=
EN-US style=3D'font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-=
language:NL'>It goes without saying that only one of the two server set-ups=
can be active during testing <o:p></o:p></span></p><p class=3DMsoNormal st=
yle=3D'margin-bottom:12.0pt'><span lang=3DEN-US style=3D'font-size:10.0pt;f=
ont-family:"Arial",sans-serif;mso-fareast-language:NL'><o:p> </o:p></s=
pan></p><p class=3DMsoNormal style=3D'margin-bottom:12.0pt'><span lang=3DEN=
-US style=3D'font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-la=
nguage:NL'>Well, that is the end of my=E2=80=99small=E2=80=99 mail </span><=
span lang=3DEN-US style=3D'font-size:10.0pt;font-family:"Segoe UI Emoji",sa=
ns-serif;mso-fareast-language:NL'>😉</span><span lang=3DEN-US style=
=3D'font-size:10.0pt;font-family:"Arial",sans-serif;mso-fareast-language:NL=
'><o:p></o:p></span></p><p class=3DMsoNormal style=3D'margin-bottom:12.0pt'=
><span lang=3DEN-US style=3D'font-size:10.0pt;font-family:"Arial",sans-seri=
f;mso-fareast-language:NL'><o:p> </o:p></span></p><p class=3DMsoNormal=
style=3D'margin-bottom:12.0pt'><span lang=3DEN-US style=3D'font-size:10.0p=
t;font-family:"Arial",sans-serif;color:black;mso-fareast-language:NL'>Kind =
regards</span><span lang=3DEN-US style=3D'font-size:10.0pt;font-family:"Ari=
al",sans-serif;mso-fareast-language:NL'>,<o:p></o:p></span></p><p class=3DM=
soNormal><b><span style=3D'font-size:10.0pt;font-family:"Arial",sans-serif;=
color:#009CDE;mso-fareast-language:NL'>Hannah Koperberg</span></b><b><span =
style=3D'font-size:10.0pt;font-family:"Arial",sans-serif;color:black;mso-fa=
reast-language:NL'>, de Volksbank in the Netherlands</span></b><b><span sty=
le=3D'font-size:10.0pt;font-family:"Arial",sans-serif;color:#009CDE;mso-far=
east-language:NL'><o:p></o:p></span></b></p><table class=3DMsoNormalTable b=
order=3D0 cellspacing=3D0 cellpadding=3D0 width=3D652 style=3D'width:489.05=
pt;border-collapse:collapse'><tr><td width=3D43 style=3D'width:32.25pt;padd=
ing:0cm 0cm 0cm 0cm'></td><td width=3D41 style=3D'width:30.75pt;padding:0cm=
0cm 0cm 0cm'></td><td width=3D43 style=3D'width:32.25pt;padding:0cm 0cm 0c=
m 0cm'></td><td width=3D42 style=3D'width:31.5pt;padding:0cm 0cm 0cm 0cm'><=
/td><td width=3D90 style=3D'width:67.5pt;padding:0cm 0cm 0cm 0cm'></td><td =
width=3D393 style=3D'width:294.8pt;padding:0cm 0cm 0cm 0cm'></td></tr></tab=
le><p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Arial"=
,sans-serif;mso-fareast-language:NL'><o:p> </o:p></span></p><p class=
=3DMsoNormal><b><span style=3D'font-size:10.0pt;font-family:"Arial",sans-se=
rif;color:#000066;mso-fareast-language:NL'><o:p> </o:p></span></b></p>=
<p class=3DMsoNormal><b><span style=3D'font-size:10.0pt;font-family:"Arial"=
,sans-serif;color:#000066;mso-fareast-language:NL'><o:p> </o:p></span>=
</b></p><p class=3DMsoNormal><o:p> </o:p></p></div></body></html>=
--_0A75C79F-2036-4D5D-95B7-B5E2F8764777_--
--===============4013275977307893739==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
--===============4013275977307893739==--