I generated an SSL certificate as specified on the answer to stunnel: SSL-to-SSL? (for smtp/imap) And have the following configuation file:

cert = /home/marshall/stunnels/certs/umistunnel.keys

; protocol version (all, SSLv2, SSLv3, TLSv1)
sslVersion = SSLv3

pid = ./stunnel4.pid

accept  = 4433
connect = 3000

When I run

> stunnel config.conf

the error I get is:

Reading configuration from descriptor 3
Snagged 64 random bytes from /home/marshall/.rnd
Wrote 1024 new random bytes to /home/marshall/.rnd
PRNG seeded successfully
Line 1: End of section stunnel: SSL server needs a certificate

If I instead run:

> stunnel filethatdoesnotexist.asdf

I get the same result. And, if I run stunnel without any parameters, the only change is that the error states Line 0. What am I doing wrong here?

  • What version of stunnel is installed? – Zoredache Sep 5 '12 at 17:31
  • It looks like version 4.05... – Marshall Anschutz Sep 5 '12 at 18:18

You may have both stunnel3 & stunnel4 installed on your system.

The default for "stunnel" is to softlink it to stunnel3:

root@sibelius:/usr/bin# ls -l stunnel*
lrwxrwxrwx 1 root root      8 Oct 18  2011 stunnel -> stunnel3
-rwxr-xr-x 1 root root   2797 Oct 18  2011 stunnel3
-rwxr-xr-x 1 root root 109904 Oct 18  2011 stunnel4

The syntax of the stunnel.conf for stunnel3 is not compatible with the one for stunnel4.

Hence the error. Try removing stunnel3.

  • You can just create a new symlink like so sudo rm /usr/bin/stunnel && sudo ln -s /usr/bin/stunnel4 /usr/bin/stunnel – Justin Fortier Sep 19 '17 at 15:05

Found my problem... It's not really documented (at least on my Ubuntu system). If I run the command

> stunnel4 config.conf

Then everything works, and all output shows up in the debug log file (if configured in the config file).


put the cert line in [https] also.

  • I added an identical (cert) line immediately under the [https] line, but it still gives the same error (and yes, I did verify that the file exists.) – Marshall Anschutz Sep 5 '12 at 17:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.