An SSL-encrypting socket wrapper
Go to file
Clemens Lang 6e12981e3c Fix encrypted keys and pw prompt retry w/OpenSSL 3
Stunnel has a ui_retry() function that inspects the topmost entry on the
OpenSSL error stack to decide whether it should re-try a certain
operation.

With OpenSSL 3, many of these error codes changed. For example, when
using an encrypted private key, stunnel will prompt for the password on
startup, but will not repeat the prompt with OpenSSL 3 when the password
is entered incorrectly, because the error code returned for this case
changed.

This problem becomes worse with OpenSSL 3.0.7 in RHEL 9.2: because of
the same root cause, stunnel no longer prompts for the password at all.

Fix this by backporting changes in the ui_retry() function from 5.66.

Resolves: rhbz#2151888
Signed-off-by: Clemens Lang <cllang@redhat.com>
2022-12-08 14:24:25 +01:00
.gitignore New upstream release 5.62 2022-01-18 12:16:49 +01:00
Certificate-Creation RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
gating.yaml Add RHEL gating configuration 2021-08-03 14:16:09 +00:00
pop3-redirect.xinetd RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
sfinger.xinetd RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
sources New upstream release 5.62 2022-01-18 12:16:49 +01:00
stunnel-5.50-authpriv.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
stunnel-5.56-coverity.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
stunnel-5.56-curves-doc-update.patch Merged update from upstream sources 2021-02-11 17:09:19 +00:00
stunnel-5.56-system-ciphers.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
stunnel-5.61-default-tls-version.patch New upstream release 5.62 2022-01-18 12:16:49 +01:00
stunnel-5.61-openssl30-fips.patch New upstream release 5.62 2022-01-18 12:16:49 +01:00
stunnel-5.61-systemd-service.patch New upstream release 5.62 2022-01-18 12:16:49 +01:00
stunnel-5.62-disabled-curves.patch Fix stunnel in FIPS mode 2022-02-04 15:46:55 +01:00
stunnel-5.62-openssl3-error-handling.patch Fix encrypted keys and pw prompt retry w/OpenSSL 3 2022-12-08 14:24:25 +01:00
stunnel-pop3s-client.conf RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
stunnel-sfinger.conf RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00
stunnel.spec Fix encrypted keys and pw prompt retry w/OpenSSL 3 2022-12-08 14:24:25 +01:00
stunnel@.service RHEL 9.0.0 Alpha bootstrap 2020-10-15 10:04:32 -07:00