Mantis - stunnel
Viewing Issue Advanced Details
5168 regular use block always 2014-04-23 21:25 2014-05-30 10:18
klpaskettw  
bwalton  
normal  
closed  
fixed  
none    
none  
0005168: stunnel needs to be recompiled to work with OpenSSL 1.0.1g
Upon upgrade OpenSSL to 1.0.1g to fix the heartblead issue, stunnel will no longer start up. The following error is produced.

stunnel 4.56 on i386-pc-solaris2.10 platform
Compiled with OpenSSL 1.0.1e 11 Feb 2013
Running with OpenSSL 1.0.1g 7 Apr 2014
Update OpenSSL shared libraries or rebuild stunnel
Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS Auth:LIBWRAP
Reading configuration from file /etc/opt/csw/stunnel/stunnel.conf
FIPS_mode_set: F06D065: error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not supported
Line 67: "[ldaps]": Failed to initialize SSL
str_stats: 7 block(s), 150 data byte(s), 294 control byte(s)

Issue History
2014-04-23 21:25 klpaskettw New Issue
2014-04-23 23:58 bwalton Note Added: 0010808
2014-04-24 14:35 dam Status new => assigned
2014-04-24 14:35 dam Assigned To => bwalton
2014-04-24 14:35 dam Status assigned => feedback
2014-04-24 17:38 klpaskettw Note Added: 0010811
2014-05-05 04:34 klpaskettw Note Added: 0010817
2014-05-05 04:37 klpaskettw Note Edited: 0010817
2014-05-30 10:18 bwalton Status feedback => closed
2014-05-30 10:18 bwalton Resolution open => fixed

Notes
(0010808)
bwalton   
2014-04-23 23:58   
I just uploaded new packages to the unstable catalog. Please test these when they hit your mirror.

Thanks
-Ben
(0010811)
klpaskettw   
2014-04-24 17:38   
http://mirror.opencsw.org/status/ [^] shows that none of the mirrors have updated since 2014-04-09 04:08:50. I will test as soon as it shows up.
(0010817)
klpaskettw   
2014-05-05 04:34   
(edited on: 2014-05-05 04:37)
I updated to the latest packages and stunnel is working fine.

I did have to add 'fips = no' to the default config file though. Maybe that was the problem all along.