[prev in list] [next in list] [prev in thread] [next in thread] 

List:       stunnel-users
Subject:    [stunnel-users] TLS socket closed (SSL_write) with unsent byte(s)
From:       Cotswold Group - Stephen Murray <stephenmurray () cotswoldgroup ! com>
Date:       2018-01-16 14:58:23
Message-ID: ddb9580c45544172b24a3c0982f20c26 () winhexbeeu50 ! win ! mail
[Download RAW message or body]

Hi All,

We use stunnel to send emails from our scanners to our hosted mail provider (that now \
only accept TLS connections). This has been working well for a number of years, but \
just recently the scanners (all Lexmark) have sporadically been giving errors of \
'connection failed'.

If I check the stunnel logs, the failed send has an extra line in of TLS socket \
closed (SSL_write) with 418 unsent byte(s)

Below are 2 examples, 59 was sent successfully, 60 was not.

2018.01.16 14:37:24 LOG5[59]: Service [fasthosts-smtp] accepted connection from \
10.226.174.95:11473 2018.01.16 14:37:24 LOG5[59]: s_connect: connected \
213.171.216.50:465 2018.01.16 14:37:24 LOG5[59]: Service [fasthosts-smtp] connected \
remote server from 10.226.150.9:52577 2018.01.16 14:37:24 LOG5[59]: OCSP: Connecting \
the AIA responder "http://t2.symcb.com" 2018.01.16 14:37:24 LOG5[59]: s_connect: \
connected 23.55.155.27:80 2018.01.16 14:37:24 LOG5[59]: OCSP: Certificate accepted
2018.01.16 14:37:24 LOG5[59]: OCSP: Connecting the AIA responder \
"http://tj.symcd.com" 2018.01.16 14:37:25 LOG5[59]: s_connect: connected \
23.55.155.27:80 2018.01.16 14:37:25 LOG5[59]: OCSP: Certificate accepted
2018.01.16 14:37:25 LOG5[59]: Certificate accepted at depth=0: C=GB, \
ST=Gloucestershire, L=Gloucester, O=Fasthosts Internet Limited, OU=NOC, \
CN=smtp.livemail.co.uk 2018.01.16 14:37:29 LOG5[59]: Connection closed: 167106 \
byte(s) sent to TLS, 376 byte(s) sent to socket

2018.01.16 14:38:19 LOG5[60]: Service [fasthosts-smtp] accepted connection from \
10.226.174.95:11483 2018.01.16 14:38:19 LOG5[60]: s_connect: connected \
213.171.216.50:465 2018.01.16 14:38:19 LOG5[60]: Service [fasthosts-smtp] connected \
remote server from 10.226.150.9:52620 2018.01.16 14:38:19 LOG5[60]: OCSP: Connecting \
the AIA responder "http://t2.symcb.com" 2018.01.16 14:38:19 LOG5[60]: s_connect: \
connected 23.55.155.27:80 2018.01.16 14:38:19 LOG5[60]: OCSP: Certificate accepted
2018.01.16 14:38:19 LOG5[60]: OCSP: Connecting the AIA responder \
"http://tj.symcd.com" 2018.01.16 14:38:19 LOG5[60]: s_connect: connected \
23.55.155.27:80 2018.01.16 14:38:19 LOG5[60]: OCSP: Certificate accepted
2018.01.16 14:38:19 LOG5[60]: Certificate accepted at depth=0: C=GB, \
ST=Gloucestershire, L=Gloucester, O=Fasthosts Internet Limited, OU=NOC, \
CN=smtp.livemail.co.uk 2018.01.16 14:38:24 LOG3[60]: TLS socket closed (SSL_write) \
with 418 unsent byte(s) 2018.01.16 14:38:24 LOG5[60]: Connection reset: 964 byte(s) \
sent to TLS, 392 byte(s) sent to socket

Has anyone come across this before?
Our mail provider has send limits in place of 50 every 10 minutes, but I am confident \
we are not reaching those amounts.

Any help appreciated.

Regards, Stephen


[Attachment #3 (text/html)]

<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" \
xmlns="http://www.w3.org/TR/REC-html40"> <head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;
	mso-fareast-language:EN-US;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi All,<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">We use stunnel to send emails from our scanners to our hosted \
mail provider (that now only accept TLS connections).<o:p></o:p></p> <p \
class="MsoNormal">This has been working well for a number of years, but just recently \
the scanners (all Lexmark) have sporadically been giving errors of &#8216;connection \
failed&#8217;.<o:p></o:p></p> <p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">If I check the stunnel logs, the failed send has an extra line \
in of TLS socket closed (SSL_write) with 418 unsent byte(s)<o:p></o:p></p> <p \
class="MsoNormal"><o:p>&nbsp;</o:p></p> <p class="MsoNormal">Below are 2 examples, 59 \
was sent successfully, 60 was not.<o:p></o:p></p> <p \
class="MsoNormal"><o:p>&nbsp;</o:p></p> <p class="MsoNormal">2018.01.16 14:37:24 \
LOG5[59]: Service [fasthosts-smtp] accepted connection from \
10.226.174.95:11473<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:37:24 LOG5[59]: \
s_connect: connected 213.171.216.50:465<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:37:24 LOG5[59]: Service [fasthosts-smtp] connected \
remote server from 10.226.150.9:52577<o:p></o:p></p> <p class="MsoNormal">2018.01.16 \
14:37:24 LOG5[59]: OCSP: Connecting the AIA responder \
&quot;http://t2.symcb.com&quot;<o:p></o:p></p> <p class="MsoNormal">2018.01.16 \
14:37:24 LOG5[59]: s_connect: connected 23.55.155.27:80<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:37:24 LOG5[59]: OCSP: Certificate \
accepted<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:37:24 LOG5[59]: OCSP: \
Connecting the AIA responder &quot;http://tj.symcd.com&quot;<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:37:25 LOG5[59]: s_connect: connected \
23.55.155.27:80<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:37:25 LOG5[59]: \
OCSP: Certificate accepted<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:37:25 \
LOG5[59]: Certificate accepted at depth=0: C=GB, ST=Gloucestershire, L=Gloucester, \
O=Fasthosts Internet Limited, OU=NOC, CN=smtp.livemail.co.uk<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:37:29 LOG5[59]: Connection closed: 167106 byte(s) \
sent to TLS, 376 byte(s) sent to socket<o:p></o:p></p> <p \
class="MsoNormal"><o:p>&nbsp;</o:p></p> <p class="MsoNormal">2018.01.16 14:38:19 \
LOG5[60]: Service [fasthosts-smtp] accepted connection from \
10.226.174.95:11483<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:38:19 LOG5[60]: \
s_connect: connected 213.171.216.50:465<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:38:19 LOG5[60]: Service [fasthosts-smtp] connected \
remote server from 10.226.150.9:52620<o:p></o:p></p> <p class="MsoNormal">2018.01.16 \
14:38:19 LOG5[60]: OCSP: Connecting the AIA responder \
&quot;http://t2.symcb.com&quot;<o:p></o:p></p> <p class="MsoNormal">2018.01.16 \
14:38:19 LOG5[60]: s_connect: connected 23.55.155.27:80<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:38:19 LOG5[60]: OCSP: Certificate \
accepted<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:38:19 LOG5[60]: OCSP: \
Connecting the AIA responder &quot;http://tj.symcd.com&quot;<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:38:19 LOG5[60]: s_connect: connected \
23.55.155.27:80<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:38:19 LOG5[60]: \
OCSP: Certificate accepted<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:38:19 \
LOG5[60]: Certificate accepted at depth=0: C=GB, ST=Gloucestershire, L=Gloucester, \
O=Fasthosts Internet Limited, OU=NOC, CN=smtp.livemail.co.uk<o:p></o:p></p> <p \
class="MsoNormal">2018.01.16 14:38:24 LOG3[60]: TLS socket closed (SSL_write) with \
418 unsent byte(s)<o:p></o:p></p> <p class="MsoNormal">2018.01.16 14:38:24 LOG5[60]: \
Connection reset: 964 byte(s) sent to TLS, 392 byte(s) sent to socket<o:p></o:p></p> \
<p class="MsoNormal"><o:p>&nbsp;</o:p></p> <p class="MsoNormal">Has anyone come \
across this before?<o:p></o:p></p> <p class="MsoNormal">Our mail provider has send \
limits in place of 50 every 10 minutes, but I am confident we are not reaching those \
amounts.<o:p></o:p></p> <p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">Any help appreciated.<o:p></o:p></p>
<p class="MsoNormal"><o:p>&nbsp;</o:p></p>
<p class="MsoNormal">Regards, Stephen<o:p></o:p></p>
</div>
</body>
</html>


[Attachment #4 (unknown)]

_______________________________________________
stunnel-users mailing list
stunnel-users@stunnel.org
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic