An SSL-encrypting socket wrapper
6e12981e3c
Stunnel has a ui_retry() function that inspects the topmost entry on the OpenSSL error stack to decide whether it should re-try a certain operation. With OpenSSL 3, many of these error codes changed. For example, when using an encrypted private key, stunnel will prompt for the password on startup, but will not repeat the prompt with OpenSSL 3 when the password is entered incorrectly, because the error code returned for this case changed. This problem becomes worse with OpenSSL 3.0.7 in RHEL 9.2: because of the same root cause, stunnel no longer prompts for the password at all. Fix this by backporting changes in the ui_retry() function from 5.66. Resolves: rhbz#2151888 Signed-off-by: Clemens Lang <cllang@redhat.com> |
||
---|---|---|
.gitignore | ||
Certificate-Creation | ||
gating.yaml | ||
pop3-redirect.xinetd | ||
sfinger.xinetd | ||
sources | ||
stunnel-5.50-authpriv.patch | ||
stunnel-5.56-coverity.patch | ||
stunnel-5.56-curves-doc-update.patch | ||
stunnel-5.56-system-ciphers.patch | ||
stunnel-5.61-default-tls-version.patch | ||
stunnel-5.61-openssl30-fips.patch | ||
stunnel-5.61-systemd-service.patch | ||
stunnel-5.62-disabled-curves.patch | ||
stunnel-5.62-openssl3-error-handling.patch | ||
stunnel-pop3s-client.conf | ||
stunnel-sfinger.conf | ||
stunnel.spec | ||
stunnel@.service |