Re: stunnel-users Digest, Vol 182, Issue 7
Brent Kimberley <[email protected]> Wed, 18 Sep 2019 16:30:21 +0000 (UTC)
| Newsgroups | gmane.network.stunnel.user |
|---|---|
| Message-ID | <[email protected]> |
--===============2934473019363980139==
Content-Type: multipart/alternative;
boundary="----=_Part_6227673_360436628.1568824221677"
------=_Part_6227673_360436628.1568824221677
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
psk_find() and psk_server_callback() are marked NOEXPORT.=C2=A0 =C2=A0
You can try whitebox - decompile=C2=A0ctx.c::=C2=A0psk_server_callback() an=
d/or blackbox - breaking the problem into parts to see what works/fails.=C2=
=A0=C2=A0
Decomposing the problem into parts :a) Two differing stunnel versions and a=
common openssl library.=C2=A0=C2=A0b) One common stunnel version and two d=
iffering openssl libraries.=C2=A0=C2=A0
On Wednesday, September 18, 2019, 11:28:48 a.m. EDT, Brent Kimberley <b=
[email protected]> wrote: =20
=20
>>=C2=A02019.09.16 13:36:28 LOG6[3]: PSK identity not found (session resu=
mption?)Try dumping the symbols for ctx.c::psk_find(),=C2=A0ssl_lib.c::SSL_=
get_ex_data(), and=C2=A0ctx.c::=C2=A0psk_server_callback().=C2=A0
Date: Tue, 17 Sep 2019 18:18:13 +0200
From: Hannah Koperberg <[email protected]>
Subject: [stunnel-users] Problems when using PSK between a version of
=C2=A0=C2=A0=C2=A0 stunnel usingopenssl 1.0 and a version of stunnel using =
openssl 1.1.1
We encounter problems when using PSK between a version of stunnel using ope=
nssl 1.0 and a version of stunnel using openssl 1.1.1
The problem being the following:
2019.09.16 13:36:28 LOG6[3]: PSK identity not found (session resumption?)
2019.09.16 13:36:28 LOG7[3]: TLS alert (write): fatal: unknown PSK identity
2019.09.16 13:36:28 LOG3[3]: SSL_accept: s3_srvr.c:2845: error:1408B0DF:SSL=
routines:ssl3_get_client_key_exchange:psk identity not found
No problems are encountered when using certificates or when the same versio=
ns of stunnel and openssl are used.
In the latter case neither certificates nor PSK give any problems connectin=
g.
Kind regards,
Hannah Koperberg, de Volksbank in the Netherlands
=20
------=_Part_6227673_360436628.1568824221677
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydpa998151ayahoo-style-wrap" style=
=3D"font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px=
;"><div></div>
<div dir=3D"ltr" data-setdir=3D"false">psk_find() and psk_server_ca=
llback() are marked NOEXPORT. </div><div dir=3D"ltr" data-setdi=
r=3D"false"><br></div><div dir=3D"ltr" data-setdir=3D"false">You can try wh=
itebox - decompile <span><span style=3D"font-family: Helvetica Neue, H=
elvetica, Arial, sans-serif; font-size: 16px; color: rgb(0, 0, 0);">ctx.c::=
</span><span style=3D"font-family: Helvetica Neue, Helvetica, Arial, =
sans-serif; font-size: 16px; color: rgb(0, 0, 0);">psk_server_callback() an=
d/</span></span>or blackbox - breaking the problem into parts <span><span s=
tyle=3D"color: rgb(0, 0, 0); font-family: Helvetica Neue, Helvetica, Arial,=
sans-serif; font-size: 16px;">to see what works/fails</span></span>. =
</div><div dir=3D"ltr" data-setdir=3D"false"><br></div><div dir=3D"lt=
r" data-setdir=3D"false">Decomposing the problem into parts :</div><div dir=
=3D"ltr" data-setdir=3D"false">a) Two differing stunnel versions and a comm=
on openssl library. </div><div dir=3D"ltr" data-setdir=3D"false"=
><span style=3D"color: rgb(38, 40, 42);">b) One common stunnel version and =
two differing openssl libraries. </span><br></div><div><br></div=
>
=20
</div><div id=3D"ydpe856985ayahoo_quoted_9565560579" class=3D"ydpe8=
56985ayahoo_quoted">
<div style=3D"font-family:'Helvetica Neue', Helvetica, Arial, s=
ans-serif;font-size:13px;color:#26282a;">
=20
<div>
On Wednesday, September 18, 2019, 11:28:48 a.m. EDT, Br=
ent Kimberley <[email protected]> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id=3D"ydpe856985ayiv1896768300"><div><div class=
=3D"ydpe856985ayiv1896768300ydp84e28649yahoo-style-wrap" style=3D"font-fami=
ly:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div=
>
<div dir=3D"ltr">>> <span><span style=3D"color:rgb(38, 4=
0, 42);font-family:Helvetica Neue, Helvetica, Arial, sans-serif;">2019.09.1=
6 13:36:28 LOG6[3]: PSK identity not found (session resumption?)</span></sp=
an></div><div dir=3D"ltr">Try dumping the symbols for ctx.c::<span>psk_find=
(), </span>ssl_lib.c::SSL_get_ex_data(), and <span><span style=3D=
"color:rgb(0, 0, 0);font-family:Helvetica Neue, Helvetica, Arial, sans-seri=
f;font-size:16px;">ctx.c:: </span><span style=3D"color:rgb(0, 0, 0);fo=
nt-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">psk=
_server_callback(). </span></span></div><div class=3D"ydpe856985ayiv18=
96768300yqt6047375430" id=3D"ydpe856985ayiv1896768300yqtfd75294"><div dir=
=3D"ltr"><br clear=3D"none"></div><div dir=3D"ltr"><br clear=3D"none"></div=
></div></div><div class=3D"ydpe856985ayiv1896768300yqt6047375430" id=3D"ydp=
e856985ayiv1896768300yqtfd60988"><div class=3D"ydpe856985ayiv1896768300ydp7=
2c51bfayahoo_quoted" id=3D"ydpe856985ayiv1896768300ydp72c51bfayahoo_quoted_=
9320549870"><div style=3D"font-family:'Helvetica Neue', Helvetica, Arial, s=
ans-serif;font-size:13px;color:#26282a;"><div><div dir=3D"ltr">Date: Tue, 1=
7 Sep 2019 18:18:13 +0200<br clear=3D"none"></div><div dir=3D"ltr">From: Ha=
nnah Koperberg <<a shape=3D"rect" href=3D"mailto:hannah.koperberg@gmail.=
com" rel=3D"nofollow" target=3D"_blank">[email protected]</a>><=
br clear=3D"none"></div><div dir=3D"ltr">Subject: [stunnel-users] Problems =
when using PSK between a version of<br clear=3D"none"></div><div dir=3D"ltr=
"> stunnel usingopenssl 1.0 and a version of stunnel usin=
g openssl 1.1.1<br clear=3D"none"></div><div dir=3D"ltr"><br clear=3D"none"=
></div><div dir=3D"ltr"><br clear=3D"none"></div><div dir=3D"ltr">We encoun=
ter problems when using PSK between a version of stunnel using openssl 1.0 =
and a version of stunnel using openssl 1.1.1<br clear=3D"none"></div><div d=
ir=3D"ltr">The problem being the following:<br clear=3D"none"></div><div di=
r=3D"ltr">2019.09.16 13:36:28 LOG6[3]: PSK identity not found (session resu=
mption?)<br clear=3D"none"></div><div dir=3D"ltr">2019.09.16 13:36:28 LOG7[=
3]: TLS alert (write): fatal: unknown PSK identity<br clear=3D"none"></div>=
<div dir=3D"ltr">2019.09.16 13:36:28 LOG3[3]: SSL_accept: s3_srvr.c:2845: e=
rror:1408B0DF:SSL routines:ssl3_get_client_key_exchange:psk identity not fo=
und<br clear=3D"none"></div><div dir=3D"ltr"><br clear=3D"none"></div><div =
dir=3D"ltr">No problems are encountered when using certificates or when the=
same versions of stunnel and openssl are used.<br clear=3D"none"></div><di=
v dir=3D"ltr">In the latter case neither certificates nor PSK give any prob=
lems connecting.<br clear=3D"none"></div><div dir=3D"ltr"><br clear=3D"none=
"></div><div dir=3D"ltr">Kind regards,<br clear=3D"none"></div><div dir=3D"=
ltr">Hannah Koperberg, de Volksbank in the Netherlands<br clear=3D"none"></=
div><div dir=3D"ltr"><br clear=3D"none"></div></div>
</div>
</div></div></div></div></div>
</div>
</div></body></html>
------=_Part_6227673_360436628.1568824221677--
--===============2934473019363980139==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
--===============2934473019363980139==--