Was gonna write about this soon. Run into the same problem while upgrading a machine from 3.5 to 3.9.
running an exec cmd not in a pty is broken in stunnel since they added --enable-ipv6 in OpenBSD 3.7. It fails in make_sockets() in client.c. I could make it work by not using --enable-ipv6. Was gonna try by undefining INET_SOCKET_PAIR in client.c to see if that worked but got sidetracked. I didn't debug the program to see what was wrong. This is what I figured from ktracing it. On Mon, Jun 12, 2006 at 04:02:57PM -0400, Seth Hanford wrote: > -- The message below was posted to ports@ earlier this morning. > > I got some feedback, mostly encouraging me to post to [EMAIL PROTECTED] I've > incorporated the "client = no" suggestion, and rerun my stunnel.log, > still no success. I have also tried without the chroot, and appropriate > path changes. > > I'm trying to use stunnel to run dhartmei's undeadly.org CGI on my > personal web server. However, I can't get stunnel to connect to the > https auth CGI. Is anyone else having connect problems with > stunnel-4.14p0 under i386? > > Any ideas on why the connects are failing? Even running under debug > level 7, I can't figure out what to do differently. Similar errors have > been reported (i found 1 at least) to stunnel-users by OpenBSD users, > but got no replies. > > I'm running thttpd-2.25b and stunnel-4.14p0 from packages. Stunnel is > invoked from the command line, not currently running from inetd. What > I've included below is a fresh log -- stunnel.log is removed after > stunnel is kill'd. Then, I start stunnel and try a single https request > to my server. > > I'm connecting primarily from Opera 9 on OS X, but have tried with lynx, > safari and IE each with the same results. > > Thanks for any tips/assistance, > Seth Hanford > > stunnel.conf > # Modified for OpenBSD by Michael Schubert 2003 > > cert = /etc/ssl/server.crt > key = /etc/ssl/private/server.key > > chroot = /var/www/htdocs/auth > setuid = _stunnel > setgid = _stunnel > pid = /var/www/htdocs/auth/stunnel.pid > > socket = l:TCP_NODELAY=1 > socket = r:TCP_NODELAY=1 > > debug = 7 > output = /var/www/htdocs/auth/stunnel.log > client = no > > [https] > accept = 443 > exec = /cgi > execargs = cgi > TIMEOUTclose = 0 > TIMEOUTidle = 10 > > 2006.06.12 15:58:15 LOG3[19137:2270484480]: connect: Invalid argument (22) -- Hugo Villeneuve <[EMAIL PROTECTED]> http://EINTR.net/
