Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
I have successfully connected to my news with stunnel in between. Only question I have is that pan tells me that it tells me localhost connection reset by peer. here is a log. I get all my news though and it works but it gives me these errors occaisionally.
Code:
Sat Jul 19 18:23:51 2008 - Error reading from localhost: Connection reset by peer
Sat Jul 19 18:23:51 2008 - Loaded 1345 articles for "alt.os.linux.ubuntu" in 0.1 seconds (22777 per second)
Sat Jul 19 18:23:51 2008 - Loaded 1617 articles for "comp.lang.ruby" in 0.1 seconds (24094 per second)
Sat Jul 19 18:23:51 2008 - Loaded 16 articles for "comp.os.linux.powerpc" in 0.0 seconds (1552 per second)
Sat Jul 19 18:23:52 2008 - Loaded 247 articles for "linux.debian.ports.powerpc" in 0.0 seconds (34936 per second)
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
Hey - Thanks a bunch for the guide.
Bookmarked for future reference - it worked like a charm ;-)
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
I think it is important (obvious to most) point to run the /etc/init.d/stunnel4 start with sudo.
sudo /etc/init.d/stunnel4 start
This resolves any PID problems.
Thanks,
Fred
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
I also was getting the error:
You should check that you have specified the pid= in you configuration file
it was solved when i realized that i forget to uncomment the "client = yes" line.
just double check your .conf file to make sure it matches the OP's settings.
thanks!
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
**update** I made this work by simply stopping stunnel, ie "sudo /etc/init.d/stunnel4 stop" and restarting it. So there you go.
Hi. I am also getting the pid error.
Stunnel worked great when I set it up yesterday, but today I ran it again and got the error--I am not able to connect.
I ran the file as "sudo" and have "client=yes" in my config file.
I read a couple things about permissions and stuff but I'm not well versed in this.
TIA for any help.
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
Quote:
Originally Posted by
43moon
Code:
/etc/init.d/stunnel4 start
I was able to get stunnel4 working with PAN. However, does the above command set stunnel4 to run at startup or do I need to run it every time before running PAN?
P.S. Thanks for the How-To. Very good and very use useful.
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
A HUGE thanks to everyone here for this advice, especially 43moon's original post. I've been trying everything to get Klibido/PAN working with Stunnel4 and getting to the point of smashing the keyboard with a large kitchen utensil, but thanks to this thread I seem to have it working!
I have a couple of questions though:
1 - Do I actually have to stop Stunnel4 when I close my newsreader?
2 - How do I check that Stunnel4 is actually working properly and encrypting my data?
MANY thanks.
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
you can check your connection with wireshark..
Start grabbing some headders...
Set a filter to tcp.port == "port number"
in my case it would be tcp.port == 443
"expression" is
Looks like..... if working and a ton of them.... Something like this...... -
|
|
|
|
|
V
Code:
165335 339.081791 xxx.xx.xxx.xx 192.168.x.xxx SSL Continuation Data
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
Many thanks for your reply, Gun_Smoke. The headers have downloaded ok, I just wanted to make sure everything was 'secure'. I've installed Wireshark, too.
Cheers!
Re: [HOWTO]: Use Pan with Stunnel4 Secure Sockets Layer (SSL)
I believe you understood me correctly, but just to clarify for those who might find this thread in the future.
Have wireshark running with the filters in place while downloading headers, as wireshark is a 'live' application. So amongst many things it does very well is watch what type of packets are going to and from where. In a very very small nutshell.
See the documentation included with WS and the tons of information on the web. There are people in ##wireshark on freenode to help you better understand what your reading should you get lost. (might be #wireshark)