From: Ant on
Hi.

I am a newbie with stunnel and news servers that use SSL connections.
What am I doing wrong as shown below? I also tried shutting down the
firewall via Guarddog program, but it didn't make any differences. :(

$ stunnel -c -d 1119 -r news.giganews.com:563; tin -g localhost -p 1119
tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
Iain Lea.
Connecting to localhost:1119...
socket or connect problem
Failed to connect to NNTP server localhost. Exiting...

Thank you in advance. :)
--
"The ants are back Ted!" --Dougal from Father Ted TV show.
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi(a)earthlink.netANT
( ) or ANTant(a)zimage.com
Go Los Angeles/L.A. Lakers. Ant is/was listening to a song on his home
computer: Covenant - Dead Stars (Longer)
From: andrew on
["Followup-To:" header set to comp.os.linux.misc.]
On 2008-06-15, Ant <ANTant(a)zimage.com> wrote:

> $ stunnel -c -d 1119 -r news.giganews.com:563; tin -g localhost -p 1119
> tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
> Iain Lea.
> Connecting to localhost:1119...
> socket or connect problem
> Failed to connect to NNTP server localhost. Exiting...

Hmmmm..... do you mean 119 rather than 1119?

Andrew

--
Do you think that's air you're breathing now?
From: Ant on
On 6/15/2008 12:30 AM PT, andrew typed:

>> $ stunnel -c -d 1119 -r news.giganews.com:563; tin -g localhost -p 1119
>> tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
>> Iain Lea.
>> Connecting to localhost:1119...
>> socket or connect problem
>> Failed to connect to NNTP server localhost. Exiting...
>
> Hmmmm..... do you mean 119 rather than 1119?

Same error/result:
$ stunnel -c -d 119 -r news.giganews.com:563; tin -g localhost -p 119
tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
Iain Lea.
Connecting to localhost...
socket or connect problem
Failed to connect to NNTP server localhost. Exiting...
--
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi(a)earthlink.netANT
( ) or ANTant(a)zimage.com
Ant is currently not listening to any songs on his home computer. Go
Los Angeles/L.A. Lakers!
From: Trevor Hemsley on
On Sun, 15 Jun 2008 07:52:06 UTC in comp.os.linux.questions, Ant
<ANTant(a)zimage.com> wrote:

> On 6/15/2008 12:30 AM PT, andrew typed:
>
> >> $ stunnel -c -d 1119 -r news.giganews.com:563; tin -g localhost -p 1119
> >> tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
> >> Iain Lea.
> >> Connecting to localhost:1119...
> >> socket or connect problem
> >> Failed to connect to NNTP server localhost. Exiting...
> >
> > Hmmmm..... do you mean 119 rather than 1119?
>
> Same error/result:
> $ stunnel -c -d 119 -r news.giganews.com:563; tin -g localhost -p 119
> tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
> Iain Lea.
> Connecting to localhost...
> socket or connect problem
> Failed to connect to NNTP server localhost. Exiting...

It might help if you were using a slightly less prehistoric version of stunnel -
v3 was already old about 5 years ago. The newer v4 does everything via
stunnel.conf and mine looks like this:

cert = stunnel.pem
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
client = yes
[nntps]
accept = 127.0.0.1:119
connect = news.giganews.com:563

With this, you might also want the debugging options set on while you get it to
work.

debug = 7
output = stunnel.log

To listen on a local port < 1024 you will need to run stunnel as root.

--
Trevor Hemsley, Brighton, UK
Trevor dot Hemsley at ntlworld dot com
From: Ant on
On 6/15/2008 2:39 AM PT, Trevor Hemsley typed:

>>>> $ stunnel -c -d 1119 -r news.giganews.com:563; tin -g localhost -p 1119
>>>> tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
>>>> Iain Lea.
>>>> Connecting to localhost:1119...
>>>> socket or connect problem
>>>> Failed to connect to NNTP server localhost. Exiting...

>>> Hmmmm..... do you mean 119 rather than 1119?

>> Same error/result:
>> $ stunnel -c -d 119 -r news.giganews.com:563; tin -g localhost -p 119
>> tin 1.9.3 release 20080506 ("Dalintober") [UNIX] (c) Copyright 1991-2008
>> Iain Lea.
>> Connecting to localhost...
>> socket or connect problem
>> Failed to connect to NNTP server localhost. Exiting...
>
> It might help if you were using a slightly less prehistoric version of stunnel -
> v3 was already old about 5 years ago. The newer v4 does everything via
> stunnel.conf and mine looks like this:

Here is the version in Debian (I apt-get update and upgrade daily):

$ stunnel
2008.06.15 02:55:30 LOG3[29444:3083032240]: Either -r, -l (or -L) option
must be used


> cert = stunnel.pem
> socket = l:TCP_NODELAY=1
> socket = r:TCP_NODELAY=1
> client = yes
> [nntps]
> accept = 127.0.0.1:119
> connect = news.giganews.com:563
>
> With this, you might also want the debugging options set on while you get it to
> work.
>
> debug = 7
> output = stunnel.log
>
> To listen on a local port < 1024 you will need to run stunnel as root.

Shouldn't command line parameters be enough? I searched (locate command)
for stunnel.conf, but it is nowhere found. Your debugging comment gave
me an idea:

$ stunnel -o stunnel.log -D 7 -c -d 1119 -r news.giganews.com:563; tin
-g lalhost -p 1119

$ more stunnel.log . Exiting...
2008.06.15 02:59:47 LOG5[29636:3083413168]: Using
'news.giganews.com.563' as tcpwrapper service name
2008.06.15 02:59:47 LOG7[29636:3083413168]: RAND_status claims
sufficient entropy for the PRNG
2008.06.15 02:59:47 LOG6[29636:3083413168]: PRNG seeded successfully
2008.06.15 02:59:47 LOG5[29636:3083413168]: stunnel 3.26 on
i486-pc-linux-gnu PTHREAD+LIBWRAP with OpenSSL 0.9.8g 19 Oct 2007
2008.06.15 02:59:47 LOG3[29637:3083413168]: Argument to -P
(/var/run/stunnel/) is not valid a directory name

Is it because of /var/run/stunnel/? If so, then how do I fix it? I tried
making a /var/run/stunnel/, but it didn't make any differences when I
retried.
--
"The ants are back Ted!" --Dougal from Father Ted TV show.
/\___/\
/ /\ /\ \ Phil/Ant @ http://antfarm.home.dhs.org (Personal Web Site)
| |o o| | Ant's Quality Foraged Links (AQFL): http://aqfl.net
\ _ / Remove ANT from e-mail address: philpi(a)earthlink.netANT
( ) or ANTant(a)zimage.com
Ant is currently not listening to any songs on his home computer. Go
Los Angeles/L.A. Lakers!