PE and Stunnel

[rlarsonmaynard]

I need help setting up stunnel on my PocoMail PE and Lexar 256 Jump Drive.

I followed all of SFCurley's instructions in the PocoMail threads, but no joy. Even using Kaigan's instructions:

"Follow the setup instructions by SFCurley. But create the STunnel directory on your USB drive and don't copy the .dll's to the windows directory. Also don't run it as a service.
Set it up on my PocoPE usb drive, tried it on two different machines and it works great. "

What does it mean to not setup stunnel as a service? I have not copied the ddls to Windows. So, do I just click the exe and it's running? Then what?

With Stunnel running in my sys tray, what happens is the operation times out trying to send a message.

Here's my Gmail setup:
Disable forwarding checked
Status: POP is enabled for all mail that has arrived since 3/7/05

Here's my PocoMail PE setup:
Incoming:
pop.gmail.com:995
ofwolf(AT)gmail.com
POP
enable secure connection SSL checked

Outgoing:
server: 127.0.0.1:259
ofwolf(AT)gmail.com
LOGIN


Here's Jump Drive my setup:

F\stunnel folder contains:
libeay32.dll
libssl32.dll
stunnel-4.04.exe

stunnel.conf
client = yes
debug = debug

[smtps]
accept = 127.0.0.1:259
connect = smtp.gmail.com:465

stunnel.pem

Code: Select all

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

Code: Select all

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Can one of you PE gurus help me out

Email address edited by Eric to prevent spambots from harvesting it. We do not recommend posting live email links here.

[Kaigan]

What does it mean to not setup stunnel as a service? I have not copied the ddls to Windows. So, do I just click the exe and it's running? Then what?

Don't use "-install" switch when running stunnel. This will install it as a service.

With Stunnel running in my sys tray, what happens is the operation times out trying to send a message.

Here's my Gmail setup:
Disable forwarding checked
Status: POP is enabled for all mail that has arrived since 3/7/05

Here's my PocoMail PE setup:
Incoming:
pop.gmail.com:995
ofwolf(AT)gmail.com
POP
enable secure connection SSL checked

Outgoing:
server: 127.0.0.1:259
ofwolf(AT)gmail.com
LOGIN


Here's Jump Drive my setup:

F\stunnel folder contains:
libeay32.dll
libssl32.dll
stunnel-4.04.exe

stunnel.conf
client = yes
debug = debug

[smtps]
accept = 127.0.0.1:259
connect = smtp.gmail.com:465

Seems right, just have all files, ie dll's, exe, conf, pem in your stunnel directory on your usb drive. Double click stunnel executable and should work.

Peter

[rlarsonmaynard]

SNIP>
Don't use "-install" switch when running stunnel. This will install it as a service.
SNIP>

After I downloaded the .exe file, and I clicked it to open it and it started running in the sys tray. Where is -install? I never saw that?

This is the log from the last attempt I made to send an e-mail:

2005.03.07 11:41:43 LOG5[1812:2416]: stunnel 4.04 on x86-pc-mingw32-gnu WIN32 with OpenSSL 0.9.7c 30 Sep 2003
2005.03.07 11:41:44 LOG7[1812:1260]: RAND_status claims sufficient entropy for the PRNG
2005.03.07 11:41:44 LOG6[1812:1260]: PRNG seeded successfully
2005.03.07 11:41:44 LOG5[1812:1260]: WIN32 platform: 30000 clients allowed
2005.03.07 11:41:44 LOG7[1812:1260]: FD 392 in non-blocking mode
2005.03.07 11:41:44 LOG7[1812:1260]: SO_REUSEADDR option set on accept socket
2005.03.07 11:41:44 LOG7[1812:1260]: smtps bound to 127.0.0.1:259
2005.03.07 11:57:27 LOG7[1812:1260]: smtps accepted FD=404 from 127.0.0.1:4009
2005.03.07 11:57:27 LOG7[1812:1260]: FD 404 in non-blocking mode
2005.03.07 11:57:27 LOG7[1812:2372]: smtps started
2005.03.07 11:57:27 LOG5[1812:2372]: smtps connected from 127.0.0.1:4009
2005.03.07 11:57:27 LOG7[1812:2372]: FD 424 in non-blocking mode
2005.03.07 11:57:27 LOG7[1812:2372]: smtps connecting 64.233.171.109:465
2005.03.07 11:57:27 LOG7[1812:2372]: remote connect #1: EWOULDBLOCK: retrying
2005.03.07 11:57:27 LOG7[1812:2372]: waitforsocket: FD=424, DIR=write
2005.03.07 12:02:27 LOG7[1812:2372]: waitforsocket: timeout
2005.03.07 12:02:27 LOG3[1812:2372]: Failed to initialize remote connection
2005.03.07 12:02:27 LOG7[1812:2372]: smtps finished (0 left)


It timed out again.

Randall

[rlarsonmaynard]

Will PocoMail PE 3.3 fix this so I won't have to use stunnel

[Kaigan]

After I downloaded the .exe file, and I clicked it to open it and it started running in the sys tray. Where is -install? I never saw that?

If you want to run it all the time as a service on XP or 2000, you use the "-install". For our purposes, just double click on the stunnel.exe file to run it.

This is the log from the last attempt I made to send an e-mail:

2005.03.07 11:41:43 LOG5[1812:2416]: stunnel 4.04 on x86-pc-mingw32-gnu WIN32 with OpenSSL 0.9.7c 30 Sep 2003
2005.03.07 11:41:44 LOG7[1812:1260]: RAND_status claims sufficient entropy for the PRNG
2005.03.07 11:41:44 LOG6[1812:1260]: PRNG seeded successfully
2005.03.07 11:41:44 LOG5[1812:1260]: WIN32 platform: 30000 clients allowed
2005.03.07 11:41:44 LOG7[1812:1260]: FD 392 in non-blocking mode
2005.03.07 11:41:44 LOG7[1812:1260]: SO_REUSEADDR option set on accept socket
2005.03.07 11:41:44 LOG7[1812:1260]: smtps bound to 127.0.0.1:259
2005.03.07 11:57:27 LOG7[1812:1260]: smtps accepted FD=404 from 127.0.0.1:4009
2005.03.07 11:57:27 LOG7[1812:1260]: FD 404 in non-blocking mode
2005.03.07 11:57:27 LOG7[1812:2372]: smtps started
2005.03.07 11:57:27 LOG5[1812:2372]: smtps connected from 127.0.0.1:4009
2005.03.07 11:57:27 LOG7[1812:2372]: FD 424 in non-blocking mode
2005.03.07 11:57:27 LOG7[1812:2372]: smtps connecting 64.233.171.109:465
2005.03.07 11:57:27 LOG7[1812:2372]: remote connect #1: EWOULDBLOCK: retrying
2005.03.07 11:57:27 LOG7[1812:2372]: waitforsocket: FD=424, DIR=write
2005.03.07 12:02:27 LOG7[1812:2372]: waitforsocket: timeout
2005.03.07 12:02:27 LOG3[1812:2372]: Failed to initialize remote connection
2005.03.07 12:02:27 LOG7[1812:2372]: smtps finished (0 left)

I will have to check mine when I get a chance. As I PM'd you, I'm on course with limited access to the Internet.


Peter

[Kaigan]

Tried last night and was able to send an email without any problems. Here is what is in my stunnel directory.

Code: Select all

Directory of I:\STunnel

06/03/2005  11:26 AM    <DIR>          .
06/03/2005  11:26 AM    <DIR>          ..
18/11/2004  11:43 AM         1,528,135 libeay32.dll
18/11/2004  11:43 AM           611,705 libssl32.dll
18/11/2004  11:46 AM                96 stunnel.conf
15/01/2005  08:32 PM            78,336 stunnel.exe
18/11/2004  11:44 AM             1,661 stunnel.pem
08/03/2005  10:19 PM                 0 test.txt
               6 File(s)      2,219,933 bytes
               2 Dir(s)     235,040,768 bytes free


My PocoPE setup is the same as yours and here is the stunnel log from last night.

Code: Select all

2005.03.08 20:09:24 LOG5[3272:3228]: stunnel 4.07 on x86-pc-mingw32-gnu WIN32+IPv6 with OpenSSL 0.9.7c 30 Sep 2003
2005.03.08 20:09:25 LOG7[3272:3304]: RAND_status claims sufficient entropy for the PRNG
2005.03.08 20:09:25 LOG6[3272:3304]: PRNG seeded successfully
2005.03.08 20:09:25 LOG5[3272:3304]: No limit detected for the number of clients
2005.03.08 20:09:25 LOG7[3272:3304]: FD 212 in non-blocking mode
2005.03.08 20:09:25 LOG7[3272:3304]: SO_REUSEADDR option set on accept socket
2005.03.08 20:09:25 LOG7[3272:3304]: smtps bound to 127.0.0.1:259
2005.03.08 20:11:37 LOG7[3272:3304]: smtps accepted FD=216 from 127.0.0.1:1210
2005.03.08 20:11:37 LOG7[3272:3304]: FD 216 in non-blocking mode
2005.03.08 20:11:37 LOG7[3272:3304]: Creating a new thread
2005.03.08 20:11:37 LOG7[3272:3304]: New thread created
2005.03.08 20:11:37 LOG7[3272:3324]: smtps started
2005.03.08 20:11:37 LOG5[3272:3324]: smtps connected from 127.0.0.1:1210
2005.03.08 20:11:37 LOG7[3272:3324]: FD 240 in non-blocking mode
2005.03.08 20:11:37 LOG7[3272:3324]: smtps connecting 64.233.185.109:465
2005.03.08 20:11:37 LOG7[3272:3324]: connect_wait: waiting 10 seconds
2005.03.08 20:11:37 LOG7[3272:3324]: connect_wait: connected
2005.03.08 20:11:37 LOG7[3272:3324]: Remote FD=240 initialized
2005.03.08 20:11:37 LOG7[3272:3324]: SSL state (connect): before/connect initialization
2005.03.08 20:11:37 LOG7[3272:3324]: SSL state (connect): SSLv3 write client hello A
2005.03.08 20:11:37 LOG7[3272:3324]: SSL state (connect): SSLv3 read server hello A
2005.03.08 20:11:38 LOG7[3272:3324]: SSL state (connect): SSLv3 read server certificate A
2005.03.08 20:11:38 LOG7[3272:3324]: SSL state (connect): SSLv3 read server done A
2005.03.08 20:11:38 LOG7[3272:3324]: SSL state (connect): SSLv3 write client key exchange A
2005.03.08 20:11:38 LOG7[3272:3324]: SSL state (connect): SSLv3 write change cipher spec A
2005.03.08 20:11:38 LOG7[3272:3324]: SSL state (connect): SSLv3 write finished A
2005.03.08 20:11:38 LOG7[3272:3324]: SSL state (connect): SSLv3 flush data
2005.03.08 20:11:38 LOG7[3272:3324]: SSL state (connect): SSLv3 read finished A
2005.03.08 20:11:38 LOG7[3272:3324]:    1 items in the session cache
2005.03.08 20:11:38 LOG7[3272:3324]:    1 client connects (SSL_connect())
2005.03.08 20:11:38 LOG7[3272:3324]:    1 client connects that finished
2005.03.08 20:11:38 LOG7[3272:3324]:    0 client renegotiatations requested
2005.03.08 20:11:38 LOG7[3272:3324]:    0 server connects (SSL_accept())
2005.03.08 20:11:38 LOG7[3272:3324]:    0 server connects that finished
2005.03.08 20:11:38 LOG7[3272:3324]:    0 server renegotiatiations requested
2005.03.08 20:11:38 LOG7[3272:3324]:    0 session cache hits
2005.03.08 20:11:38 LOG7[3272:3324]:    0 session cache misses
2005.03.08 20:11:38 LOG7[3272:3324]:    0 session cache timeouts
2005.03.08 20:11:38 LOG6[3272:3324]: SSL connected: new session negotiated
2005.03.08 20:11:38 LOG6[3272:3324]: Negotiated ciphers: DES-CBC3-SHA            SSLv3 Kx=RSA      Au=RSA  Enc=3DES(168) Mac=SHA1
2005.03.08 20:11:43 LOG7[3272:3324]: SSL socket closed on SSL_read
2005.03.08 20:11:43 LOG5[3272:3324]: Connection closed: 1099 bytes sent to SSL, 318 bytes sent to socket
2005.03.08 20:11:43 LOG7[3272:3324]: smtps finished (0 left)

The stunnel.conf is the same, so unless it's a firewall problem, I'm stumped at the moment.



Peter

[rlarsonmaynard]

maybe, let me look into that. i am at work and it doesn't work, here. i'll try it at home on a dialup and see. thanks.