Re: Help please.

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============3056413037543253204==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="sdcFzkyw4s73V3jU4drDjtXLt9t63thxK"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--sdcFzkyw4s73V3jU4drDjtXLt9t63thxK
Content-Type: multipart/mixed; boundary="jQP8XIeBZxd38cyAhJ6oi2p9FJI5jmVBl";
 protected-headers="v1"
From: Christopher Schultz <[email protected]>
To: [email protected]
Message-ID: <[email protected]>
Subject: Re: [stunnel-users] Help please.
References: <AM6PR04MB3973D97E74B40AEC1DEC04F7BB430@AM6PR04MB3973.eurprd04.prod.outlook.com>
In-Reply-To: <AM6PR04MB3973D97E74B40AEC1DEC04F7BB430@AM6PR04MB3973.eurprd04.prod.outlook.com>

--jQP8XIeBZxd38cyAhJ6oi2p9FJI5jmVBl
Content-Type: text/plain; charset=windows-1252
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Ajiq,

On 12/2/19 09:52, Ajjq . wrote:
> I need to  enable a /tunnel_out/  for UTL_HTTP from http:// to https://=

>=20
> I installed stunnel 5.34 win32 in a windows 2008 server.
>=20
> I am including my stunnel.conf y log file (debug=3D7)
>=20
> As you can see in the log file, I get this error:
>=20
> 2019.12.01 14:08:12 LOG3[7]: SSL_accept: 1407609C: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request

So you are trying something like this?

C:> TELNET LOCALHOST 80

(expect to be connected to sub.dominio.com:443)

Right?

> Could you help me please?
>=20
>=20
> *MY stunnel.conf---*
> debug =3D 7
> output =3D stunnel.log
>=20
> [https]
> accept  =3D 127.0.0.1:80
> connect =3D sub.dominio.com:443
> cert =3D stunnel.pem
> TIMEOUTclose =3D 0

I don't see any "client" line in your file, so I'm assuming it is set to
the default which is "server mode". In "server mode", stunnel listens
for incoming TLS connections and connects to an unencrypted channel.

I think you want the opposite.

> 2019.12.01 14:01:37 LOG7[1]: Service [https] started
> 2019.12.01 14:01:37 LOG5[1]: Service [https] accepted connection from
> 127.0.0.1:56582
> 2019.12.01 14:01:37 LOG7[1]: SSL state (accept): before/accept
> initialization
> 2019.12.01 14:01:37 LOG3[0]: SSL_accept: 1407609C: error:1407609C:SSL
> routines:SSL23_GET_CLIENT_HELLO:http request

Yes, it looks like it's listening for a TLS connection and not a
plain-text one.

Try setting this in your config file:

client=3Dyes

Hope that helps,
-chris


--jQP8XIeBZxd38cyAhJ6oi2p9FJI5jmVBl--

--sdcFzkyw4s73V3jU4drDjtXLt9t63thxK
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/

iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl3lLyAACgkQHPApP6U8
pFhJxxAApJhfyzTFlVfW3PLQQhV3xbGmtOJxAvkFgO+yp5fzI4AYLtfqiSM6zEPR
P32cF2Sfohp2TpdL7Yh29b5W4F+/9dfSRsBXmFjs3JH5SIgiThz8e4/FvjouHQPM
mGNmif+8x/YOi3w6wa1eWxZ3EuRIe3szMfYO2FODsGHRn0MHUfggPi8vLD+MfMOU
1c7Nqg2v47N8Yn+ZIQGfiD0fZh221AbNuqQY0QxRbYxeSBCLGNtpabdjQUJB6cnF
9l8q8xrTZ+zRz7YUYd2RdULlAQO784R3myg6oh7LV1b9JusEzXaaPdVOtiSMfXqb
in9CwfPkRJdLk6xMxUEoLQ5Q/YHroxAzF0EhOoI9xhNUQo4KAJbbrhzXECkY/x4z
NkQZtMxS1N1HNSAuMLk3/q35hB59I4eieq1pIRrU8/fh3VXI+GvmefNImCiYBIB0
pfllCYFRyAripzbO573pJHEQtYiht57zFxKdVjM/sYwFmMRBLrHO+f4/QzmApeJf
cceOOzmgaeTbg75l2tbCSvXR3xtitimFtqa4+sIJ0NP6YV9vCAY5LxMmRAUfRA8q
idVN1rP7ItMqBfAAOe69DpNjsn8k8kck+SBpHuXcwOHhJxLkPb0Xo9JUb1CWlBym
EtsuOP9nukf5BfmvnpR3sNioO1XISp+73dov9Ru6mwYUPz2VAxw=
=/D39
-----END PGP SIGNATURE-----

--sdcFzkyw4s73V3jU4drDjtXLt9t63thxK--

--===============3056413037543253204==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
stunnel-users mailing list
[email protected]
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users

--===============3056413037543253204==--