[stunnel 0005168]: stunnel needs to be recompiled to work with OpenSSL 1.0.1g

Mantis Bug Tracker via bug-notifications bug-notifications at lists.opencsw.org
Mon May 5 04:34:29 CEST 2014


A NOTE has been added to this issue. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=5168 
====================================================================== 
Reported By:                klpaskettw
Assigned To:                bwalton
====================================================================== 
Project:                    stunnel
Issue ID:                   5168
Category:                   regular use
Reproducibility:            always
Severity:                   block
Priority:                   normal
Status:                     feedback
====================================================================== 
Date Submitted:             2014-04-23 21:25 CEST
Last Modified:              2014-05-05 04:34 CEST
====================================================================== 
Summary:                    stunnel needs to be recompiled to work with OpenSSL
1.0.1g
Description: 
Upon upgrade OpenSSL to 1.0.1g to fix the heartblead issue, stunnel will no
longer start up. The following error is produced.

stunnel 4.56 on i386-pc-solaris2.10 platform
Compiled with OpenSSL 1.0.1e 11 Feb 2013
Running  with OpenSSL 1.0.1g 7 Apr 2014
Update OpenSSL shared libraries or rebuild stunnel
Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS Auth:LIBWRAP
Reading configuration from file /etc/opt/csw/stunnel/stunnel.conf
FIPS_mode_set: F06D065: error:0F06D065:common libcrypto
routines:FIPS_mode_set:fips mode not supported
Line 67: "[ldaps]": Failed to initialize SSL
str_stats: 7 block(s), 150 data byte(s), 294 control byte(s)


====================================================================== 

---------------------------------------------------------------------- 
 (0010817) klpaskettw (reporter) - 2014-05-05 04:34
 https://www.opencsw.org/mantis/view.php?id=5168#c10817 
---------------------------------------------------------------------- 
I updated to the latest packages and stunnel is working fine.

I did have to add 'fips = no' to the default config file though.



More information about the bug-notifications mailing list