Hi all,

first let me thank Bill for this great toaster and all other contributers
for their work!

I did a fresh install based on toaster 0.8.7 on a new machine with SuSE 10.0
a few days ago.
Everything worked fine, and all tests went well.
Then I made an online-update of the OS - with the result that my SuSE
installation
got messed up by a certain part of the update and I had to reinstall the OS.

Well, I noticed the new toaster 0.8.8 was available and used this one.

Everything went fine, but when I tested SSL/TLS connection for pop, like
described
in the toaster:

#openssl s_client -connect localhost:995
CONNECTED(00000003)
depth=0 /C=DE/ST=...(the rest of my cert-data)...
verify error:num=18:self signed certificate
verify return:1
depth=0 /C=DE/ST=...(the rest of my cert-data)...
verify return:1

(whatever input I make here - it's just ignored)

I can't remember how it was with the first install, but I'm sure I didn't
see any of this.
The thing is, that I don't know where to go from there. If I stop the whole
thing
with CTRL-C, an stunnel process keeps running at 99.9% CPU usage.

# ps ax | grep stunnel:
 8933 ?   S  0:00 /usr/local/bin/tcpserver -l 0 - R -H -v -u89 -g89 0 955
/usr/sbin/stunnel /service/qmail-pop3ds/stunnel.conf
24479 ?   S  0:15 /usr/sbin/stunnel  /service/qmail-pop3ds/stunnel.conf

All I can do is kill the process.

Testing the server from my thinderbird with option "use TLS" results in
error message
"Can't establish TLS-connection to the server"  (that's my own translation
from German
into English, of course).

stunnel/OpenSSL version on SuSE10:
# stunnel -version
stunnel 4.10 on i686-suse-linux-gnu UCONTEXT+POLL+IPv4+LIBWRAP with OpenSSL
0.9.7g 11 Apr 2005

And yes, I used pop3ds.run.v4 and copied stunnel.conf to
/var/qmail/supervise/qmail-pop3ds/

As I said, I think it worked with the first installation and I think I did
everything
the same way, but since I did it late at night after 16 hours of work I
might just have
done somethinmg wrong - but I can't figure out what.
Does anybody have any idea what went wrong and how to fix it ?

Thanks,
Guenter

Reply via email to