[SOLVED] stunnel configuration eroor

jsaravana87 · 02-01-2012, 03:55 AM

Hi.

#yum install stunnel

#[root@root stunnel]# ls
bkup EWORLDTR.csr EWORLDTR.key.BAK stunnel.conf
cacert.pem EWORLDTR.key EWORLDTR.PEM stunnel.log

Quote:

i had configured stunnel generated the key pasted over in /etc/stunnel
chmod 600 /etc/stunnel.when i started stunnel service its delivering errot

service stunnel start
Starting stunnel: 2012.02.01 15:24:49 LOG7[28797:3086878416]: Snagged 64 random bytes from /dev/urandom
2012.02.01 15:24:49 LOG7[28797:3086878416]: RAND_status claims sufficient entropy for the PRNG
2012.02.01 15:24:49 LOG6[28797:3086878416]: PRNG seeded successfully
2012.02.01 15:24:49 LOG7[28797:3086878416]: Certificate: /etc/stunnel/EWORLDTR.PEM
2012.02.01 15:24:49 LOG7[28797:3086878416]: Key file: /etc/stunnel/EWORLDTR.key
2012.02.01 15:24:49 LOG3[28797:3086878416]: SSL_CTX_use_RSAPrivateKey_file:

Quote:

B080074: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

cd /etc/stunnel/stunnel.conf

cat stunnel.conf
# Change below to the correct path

cert = /etc/stunnel/EWORLDTR.PEM

key = /etc/stunnel/EWORLDTR.key

CAfile = /etc/stunnel/cacert.pem

client = yes

debug=debug

# Change below to the correct Stunnel log path

output=/etc/stunnel/stunnel.log

verify=1

service=stunnel

[psuedo-https]

#IP Address of MPI Test

connect = xx:5443

accept = 4444

acid_kewpie · 02-01-2012, 04:48 AM

This suggests that the key doesn't match the certificate. check their serials: https://kb.wisc.edu/middleware/page.php?id=4064

Do you need those values? You're doing SSL on both sides of stunnel??