Package: stunnel4
Version: 4.070-3

I'm using stunnel4 to create a vpn between two hosts in different
parts of the Net using PPP. When the PPP interface goes up, pppd
runs /etc/ppp/ip-up.d/0stunnel4 which kills the currently running
stunnel and restarts it (which drops the PPP connection immediately).

The client stunnel config:

        client = yes
        debug = 7
        connect = somewhere.example.com:4567
        exec = /usr/sbin/pppd
        execargs = pppd debug call vpn
        pty = yes

The server stunnel config:

        cert = /etc/stunnel/somewhere.example.com.pem
        pid = /var/run/stunnel4/stunnel.pid
        debug = 7
        output = /var/log/stunnel4/stunnel.log

        [vpn]
        accept  = 4567
        exec = /usr/sbin/pppd
        execargs = pppd file /etc/ppp/options.vpn
        pty = yes

I'll echo the comments made in bug #271006 - the script is doing the
wrong thing. It can't get enough information to know when to do the
right thing. It might be good for some users to shutdown stunnel
when a ppp interface goes down but in general it's bad to restart
daemons unless there's a specific error condition (or package
upgrade, etc).

Nick.
-- 
PGP Key ID = 0x418487E7                      http://www.nick-andrew.net/
PGP Key fingerprint = B3ED 6894 8E49 1770 C24A  67E3 6266 6EB9 4184 87E7
"I'm not out to destroy Microsoft. That will just be a completely
unintentional side effect."                  -- Linus Torvalds, Sep 2003

Attachment: signature.asc
Description: Digital signature

Reply via email to