Hola Jorge:

Althougth I dont know how this could happen with stunnel or your server I´ve
had similar errors when a client which doesn´t speak SSL talks with a SSL
server who expects  SSL.
This can also happen, I think, when there is a SSLv23/v3 mismatch between
client and server, so perhaps you should try -ssl3/23 options in s_server
command.

Hope this helps

Pablo J. Royo

-----Original Message-----
From: Jorge Olmos <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: lunes 5 de febrero de 2001 12:18
Subject: error:wrong version number


>Hello,
>I want to commmunicate a server I´ve developed over openssl, with a
>non-ssl client through a stunnel.
>
>First, I have tried to comunicate using:        s_server <-secure->
>stunnel <-plain-text-> telnet
>$ openssl s_server -accept 4567 -cert my_cert.pem -key my_key.pem
>as server, and
>>telnet myhost 5000
>as a client through stunnel 3.11 (I´ve tried over openssl 0.9.6/win and
>0.9.5a/solaris). command line is
>$ stunnel -f -r myhost:4567 -d 5000 -p my_certANDkey.pem
>
>It works fine most of time, but sometimes I get errors like this from
>stunnel:
>LOG5[727:4]: myhost.4567 connected from 127.0.0.1:32862
>LOG3[727:4]: SSL_read: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong
>version number
>LOG5[727:4]: Connection reset: 13 bytes sent to SSL, 0 bytes sent to
>socket
>
>which closes the connection.
>What does this error means? How can I help it?
>
>--
>
>Jorge Olmos Forés
>SGI Soluciones Globales Internet [http://www.sgi.es] GMV Sistemas S.A.
>Sector Foresta 1, 2ª planta
>28760 Tres Cantos, Madrid, España.
>E-mail: [EMAIL PROTECTED]
>
>PGP keyId: 0xCB290369 Searchable at certserver.pgp.com
>
>
>______________________________________________________________________
>OpenSSL Project                                 http://www.openssl.org
>User Support Mailing List                    [EMAIL PROTECTED]
>Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to