stunnel 5.06 released

[Michal Trojnara]

Dear Users,

I have released version 5.06 of stunnel.
This is a security bugfix release. Update is recommended.

The ChangeLog entry:

Version 5.06, 2014.10.15, urgency: HIGH:
* Security bugfixes
- OpenSSL DLLs updated to version 1.0.1j.
https://www.openssl.org/news/secadv_20141015.txt
- The insecure SSLv2 protocol is now disabled by default.
It can be enabled with "options = -NO_SSLv2".
- The insecure SSLv3 protocol is now disabled by default.
It can be enabled with "options = -NO_SSLv3".
- Default sslVersion changed to "all" (also in FIPS mode)
to autonegotiate the highest supported TLS version.
* New features
- Added missing SSL options to match OpenSSL 1.0.1j.
- New "-options" commandline option to display the list
of supported SSL options.
* Bugfixes
- Fixed FORK threading build regression bug.
- Fixed missing periodic Win32 GUI log updates.

Home page: https://www.stunnel.org/
Download: https://www.stunnel.org/downloads.html

SHA-256 hashes:
098c2b6db0793ea4fa5b6767ce6ef1853e9f6cc2f32133024be55f6a460b1a40
stunnel-5.06.tar.gz
55afb3013406da1afcc1ab7ccc25bb1c66605ca3e004636a6b49cac555cb4d09
stunnel-5.06-installer.exe
a1741eb8bb050d3d29515ddef46a0a6828372a991f2658995dee1e06af8c05c8
stunnel-5.06-android.zip

Best regards,
Mike

[Dominyk Tiller]

Hi Mike,

Latest build seems to be broken for me on OS X 10.10. If it matters
here, since the error is SSL related, I'm building against OpenSSL
1.0.1j which is configured without ssl2 ciphers but with ssl3 ciphers
enabled.

This is the error:

libtool: link: clang -pthread -fstack-protector -fPIE -g -O2 -Wall
- -Wextra -Wno-long-long -pedantic -o stunnel stunnel-str.o
stunnel-file.o stunnel-client.o stunnel-log.o stunnel-options.o
stunnel-protocol.o stunnel-network.o stunnel-resolver.o stunnel-ssl.o
stunnel-ctx.o stunnel-verify.o stunnel-sthreads.o stunnel-fd.o
stunnel-stunnel.o stunnel-pty.o stunnel-libwrap.o stunnel-ui_unix.o
- -L/usr/local/opt/openssl/lib64 -L/usr/local/opt/openssl/lib -lssl
- -lcrypto -lz -lpthread -pthread
Undefined symbols for architecture x86_64:
"_SSLv2_client_method", referenced from:
_parse_service_option in stunnel-options.o
"_SSLv2_server_method", referenced from:
_parse_service_option in stunnel-options.o
ld: symbol(s) not found for architecture x86_64
clang: error: linker command failed with exit code 1 (use -v to see
invocation)
make[1]: *** [stunnel] Error 1
make[1]: *** Waiting for unfinished jobs....
libtool: link: ( cd ".libs" && rm -f "libstunnel.la" && ln -s
"../libstunnel.la" "libstunnel.la" )
make: *** [install-recursive] Error 1

Hope that's useful. Let me know if you need more.

Dom

Sent from Thunderbird for OS X. My PGP public key is automatically
attached to this email.

Post by Michal Trojnara
Dear Users,
I have released version 5.06 of stunnel. This is a security bugfix
release. Update is recommended.
Version 5.06, 2014.10.15, urgency: HIGH: * Security bugfixes -
OpenSSL DLLs updated to version 1.0.1j.
https://www.openssl.org/news/secadv_20141015.txt - The insecure
SSLv2 protocol is now disabled by default. It can be enabled with
"options = -NO_SSLv2". - The insecure SSLv3 protocol is now
disabled by default. It can be enabled with "options = -NO_SSLv3".
- Default sslVersion changed to "all" (also in FIPS mode) to
autonegotiate the highest supported TLS version. * New features -
Added missing SSL options to match OpenSSL 1.0.1j. - New "-options"
commandline option to display the list of supported SSL options. *
Bugfixes - Fixed FORK threading build regression bug. - Fixed
missing periodic Win32 GUI log updates.
https://www.stunnel.org/downloads.html
098c2b6db0793ea4fa5b6767ce6ef1853e9f6cc2f32133024be55f6a460b1a40
stunnel-5.06.tar.gz
55afb3013406da1afcc1ab7ccc25bb1c66605ca3e004636a6b49cac555cb4d09
stunnel-5.06-installer.exe
a1741eb8bb050d3d29515ddef46a0a6828372a991f2658995dee1e06af8c05c8
stunnel-5.06-android.zip
Best regards, Mike
______________________________________________________________________

OpenSSL Project http://www.openssl.org

Post by Michal Trojnara
User Support Mailing List