Re: Problems when using PSK between a version of stunnel usingopenssl 1.0 and a version of stunnel using openssl 1.1.1 in stunnel-users Digest, Vol 182, Issue 7
Brent Kimberley <[email protected]> Wed, 25 Sep 2019 16:33:17 +0000 (UTC)
| Newsgroups | gmane.network.stunnel.user |
|---|---|
| Message-ID | <[email protected]> |
--===============3384036713493315856==
Content-Type: multipart/alternative;
boundary="----=_Part_8591355_1495120775.1569429197218"
------=_Part_8591355_1495120775.1569429197218
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Hi Hannah.You're welcome.=C2=A0 Please keep in mind that Michal's unreleas=
ed stunnel v5.56=C2=A0and OpenSSL1.1.1d=C2=A0contain a couple minor severit=
y fixes.
https://www.openssl.org/news/openssl-1.1.1-notes.htmlhttps://www.stunnel.or=
g/NEWS.html
On Wednesday, September 25, 2019, 08:18:10 a.m. EDT, Koperberg, J. (Han=
nah) <[email protected]> wrote: =20
=20
=20
Hi Brent
=20
=C2=A0
=20
Thank you for your suggestions.
=20
=C2=A0
=20
I installed stunnel version 5.55 on the client test side (where the openssl=
version OpenSSL 1.1.1c is).
=20
That has solved the problem.
=20
=C2=A0
=20
Kind regards and thanks again for your help,
=20
=C2=A0
=20
Hannah Koperberg, de Volksbank N.V., The Netherlands
=20
=C2=A0
=20
From: Brent Kimberley <[email protected]>=20
Sent: woensdag 18 september 2019 18:30
To: [email protected]
Subject: Re: [stunnel-users] stunnel-users Digest, Vol 182, Issue 7
=20
=C2=A0
=20
psk_find() and psk_server_callback() are marked NOEXPORT.=C2=A0 =C2=A0
=20
=C2=A0
=20
You can try whitebox - decompile=C2=A0ctx.c::=C2=A0psk_server_callback() an=
d/or blackbox - breaking the problem into partsto see what works/fails.=C2=
=A0=C2=A0
=20
=C2=A0
=20
Decomposing the problem into parts :
=20
a) Two differing stunnel versions and a common openssl library.=C2=A0=C2=A0
=20
b) One common stunnel version and two differing openssl libraries.=C2=A0=C2=
=A0
=20
=C2=A0
=20
On Wednesday, September 18, 2019, 11:28:48 a.m. EDT, Brent Kimberley <brent=
[email protected]> wrote:
=20
=C2=A0
=20
=C2=A0
=20
>>=C2=A02019.09.16 13:36:28 LOG6[3]: PSK identity not found (session resump=
tion?)
=20
Try dumping the symbols for ctx.c::psk_find(),=C2=A0ssl_lib.c::SSL_get_ex_d=
ata(), and=C2=A0ctx.c::=C2=A0psk_server_callback().=C2=A0
=20
=C2=A0
=20
=C2=A0
=20
=C2=A0
=20
Dit e-mailbericht is alleen bestemd voor de geadresseerden. Indien dit beri=
cht niet voor u is bedoeld, wordt u verzocht de afzender hiervan op de hoog=
te te stellen door het bericht te retourneren en de inhoud niet te gebruike=
n.
This e-mail message is intended to be exclusively for the addressee. If you=
are not the intended recipient you are kindly requested not to make any us=
e whatsoever of the contents and to notify the sender immediately by return=
ing
this e-mail message.
=20
------=_Part_8591355_1495120775.1569429197218
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
<html><head></head><body><div class=3D"ydp694e2411yahoo-style-wrap" style=
=3D""><div style=3D"font-family: Helvetica Neue, Helvetica, Arial, sans-ser=
if; font-size: 16px;"></div>
<div dir=3D"ltr" data-setdir=3D"false" style=3D"font-family: Helvet=
ica Neue, Helvetica, Arial, sans-serif; font-size: 16px;">Hi Hannah.</div><=
div dir=3D"ltr" data-setdir=3D"false" style=3D"">You're welcome.<font color=
=3D"#26282a"> Please keep in mind that Michal's unreleased stunnel <s=
pan><span style=3D"color: rgb(38, 40, 42); font-family: Helvetica Neue, Hel=
vetica, Arial, sans-serif; font-size: 16px;">v5.56 </span></span>and <=
span><span style=3D"color: rgb(38, 40, 42); font-family: Helvetica Neue, He=
lvetica, Arial, sans-serif; font-size: 16px;">OpenSSL1.1.1d </span></s=
pan>contain a couple minor severity fixes.</font></div><div dir=3D"ltr" dat=
a-setdir=3D"false" style=3D"font-family: Helvetica Neue, Helvetica, Arial, =
sans-serif; font-size: 16px;"><br></div><div dir=3D"ltr" data-setdir=3D"fal=
se" style=3D"font-family: Helvetica Neue, Helvetica, Arial, sans-serif; fon=
t-size: 16px;"><span><a href=3D"https://www.openssl.org/news/openssl-1.1.1-=
notes.html" rel=3D"nofollow" target=3D"_blank" class=3D"">https://www.opens=
sl.org/news/openssl-1.1.1-notes.html</a></span><div dir=3D"ltr" data-setdir=
=3D"false"><span><a href=3D"https://www.stunnel.org/NEWS.html" rel=3D"nofol=
low" target=3D"_blank" class=3D"">https://www.stunnel.org/NEWS.html</a></sp=
an><div><br></div></div></div><div style=3D"font-family: Helvetica Neue, He=
lvetica, Arial, sans-serif; font-size: 16px;"><br></div>
=20
</div><div id=3D"ydp2e8dfd6byahoo_quoted_0002450741" class=3D"ydp2e=
8dfd6byahoo_quoted">
<div style=3D"font-family:'Helvetica Neue', Helvetica, Arial, s=
ans-serif;font-size:13px;color:#26282a;">
=20
<div>
On Wednesday, September 25, 2019, 08:18:10 a.m. EDT, Ko=
perberg, J. (Hannah) <[email protected]> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id=3D"ydp2e8dfd6byiv4082126058">
=20
=20
<div>
<div class=3D"ydp2e8dfd6byiv4082126058WordSection1">
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span>Hi Brent</span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span> </span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span lang=3D"EN-US">Thank y=
ou for your suggestions.</span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span lang=3D"EN-US"> =
</span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span lang=3D"EN-US">I insta=
lled stunnel version 5.55 on the client test side (where the openssl versio=
n OpenSSL 1.1.1c is).</span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span lang=3D"EN-US">That ha=
s solved the problem.
</span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span lang=3D"EN-US"> =
</span></p>=20
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span lang=3D"EN-US" style=
=3D"font-size:10.0pt;font-family:sans-serif;">Kind regards and thanks again=
for your help,</span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span lang=3D"EN-US" style=
=3D"font-size:10.0pt;font-family:sans-serif;"> </span></p>=20
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:10.=
0pt;font-family:sans-serif;">Hannah Koperberg, de Volksbank N.V., The Nethe=
rlands</span></p>=20
</div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span> </span></p>=20
<div>
<div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm =
0cm 0cm;">
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><b>From:</b> Brent Kimberley=
<[email protected]> <br>
<b>Sent:</b> woensdag 18 september 2019 18:30<br>
<b>To:</b> [email protected]<br>
<b>Subject:</b> Re: [stunnel-users] stunnel-users Digest, Vol 182, Issue 7<=
/p>=20
</div>
</div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"> </p>=20
<div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;">psk_find() and psk_server_callback() are marke=
d NOEXPORT. </span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;"> </span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;">You can try whitebox - decompile <span st=
yle=3D"color:black;">ctx.c:: psk_server_callback() and/</span>or black=
box - breaking the problem into parts
<span style=3D"color:black;">to see what works/fails</span>. </s=
pan></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;"> </span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;">Decomposing the problem into parts :</span></p=
>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;">a) Two differing stunnel versions and a common=
openssl library. </span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;color:#26282A;">b) One common stunnel version an=
d two differing openssl libraries. </span><span style=3D"font-si=
ze:12.0pt;font-family:sans-serif;"></span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;"> </span></p>=20
</div>
</div>
<div id=3D"ydp2e8dfd6byiv4082126058ydpe856985ayahoo_quoted_9565560579">
<div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:10.=
0pt;font-family:sans-serif;color:#26282A;">On Wednesday, September 18, 2019=
, 11:28:48 a.m. EDT, Brent Kimberley <<a href=3D"mailto:brent_kimberley@=
rogers.com" rel=3D"nofollow" target=3D"_blank">[email protected]</=
a>> wrote:
</span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:10.=
0pt;font-family:sans-serif;color:#26282A;"> </span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:10.=
0pt;font-family:sans-serif;color:#26282A;"> </span></p>=20
</div>
<div>
<div id=3D"ydp2e8dfd6byiv4082126058ydpe856985ayiv1896768300">
<div>
<div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;color:#26282A;">>> 2019.09.16 13:36:2=
8 LOG6[3]: PSK identity not found (session resumption?)</span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;color:#26282A;">Try dumping the symbols for ctx.=
c::psk_find(), ssl_lib.c::SSL_get_ex_data(), and </span><span sty=
le=3D"font-size:12.0pt;font-family:sans-serif;color:black;">ctx.c:: ps=
k_server_callback(). </span><span style=3D"font-size:12.0pt;font-famil=
y:sans-serif;color:#26282A;"></span></p>=20
</div>
<div id=3D"ydp2e8dfd6byiv4082126058ydpe856985ayiv1896768300yqtfd75294">
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;color:#26282A;"> </span></p>=20
</div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:12.=
0pt;font-family:sans-serif;color:#26282A;"> </span></p>=20
</div>
</div>
</div>
<div id=3D"ydp2e8dfd6byiv4082126058ydpe856985ayiv1896768300yqtfd60988">
<div id=3D"ydp2e8dfd6byiv4082126058ydpe856985ayiv1896768300ydp72c51bfayahoo=
_quoted_9320549870">
<div>
<div>
<div>
<p class=3D"ydp2e8dfd6byiv4082126058MsoNormal"><span style=3D"font-size:10.=
0pt;font-family:sans-serif;color:#26282A;"> </span></p>=20
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<hr>
<font face=3D"Arial" color=3D"Gray" size=3D"3"><br>
Dit e-mailbericht is alleen bestemd voor de geadresseerden. Indien dit beri=
cht niet voor u is bedoeld, wordt u verzocht de afzender hiervan op de hoog=
te te stellen door het bericht te retourneren en de inhoud niet te gebruike=
n.<br>
This e-mail message is intended to be exclusively for the addressee. If you=
are not the intended recipient you are kindly requested not to make any us=
e whatsoever of the contents and to notify the sender immediately by return=
ing<br>
this e-mail message.<br>
</font>
</div>
</div></div>
</div>
</div></body></html>
------=_Part_8591355_1495120775.1569429197218--
--===============3384036713493315856==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
--===============3384036713493315856==--