Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Cant seem to connect using stunnel to the other party. Getting an error: SSL_connect: 140943F2: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message

Any idea?

share|improve this question
add comment

3 Answers

The other party doesn't seem to speak SSL/TLS. Please ensure the remote side expects SSL on the port you're connecting to.

share|improve this answer
add comment
up vote 0 down vote accepted

Adding this line to the stunnel config fixed the problem:

sslVersion=SSLv3

share|improve this answer
add comment

i have detected, that this error occurs when my server is scanned, if to be exact pop3 on port 995.

Here is some data from my server log:

Jan  9 07:52:42 mail.lpic.lt dovecot: [ID 583609 mail.error] pop3-login: Error: SSL: Stacked error: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message: SSL alert number 10
Jan  9 07:52:42 mail.lpic.lt dovecot: [ID 583609 mail.info] pop3-login: Disconnected (no auth attempts in 2 secs): user=<>, rip=175.184.161.239, lip=127.0.0.1, TLS: SSL_read() failed: error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure: SSL alert number 10
Jan  9 07:52:43 mail.lpic.lt dovecot: [ID 583609 mail.error] pop3-login: Error: SSL: Stacked error: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message: SSL alert number 10
Jan  9 07:52:43 mail.lpic.lt dovecot: [ID 583609 mail.info] pop3-login: Disconnected (no auth attempts in 3 secs): user=<>, rip=124.88.55.93, lip=127.0.0.1, TLS: SSL_read() failed: error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure: SSL alert number 10

trying to figure out, if it always when I am scanned or when my clients connect. I do not hurry to put

sslVersion=SSLv3

or

sslVersion = all
options = NO_SSLv2

because i have some users who use alpine or even pine to check emails... so do not ant to block client's which support only SSLv2

hope my message will be usefull to someone.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.