Package: sslh
Version: 1.16-2
Severity: important
Tags: upstream

I am running sslh in --transparent mode, and as per the upstream report at
https://github.com/yrutschle/sslh/issues/64
I cannot access services behind sslh from my local machine.

sslh invocation:

# /usr/sbin/sslh -n -f -v --transparent --user sslh --listen 
<my-external-ip>:443 --ssh <my-external-ip>:2222 --ssl <my-external-ip>:4443 
--pidfile /var/run/sslh/sslh.pid

and then:

$ curl -v https://<hostname-pointing-at-my-external-ip>/
...
* Unknown SSL protocol error in connection to 
<hostname-pointing-to-my-external-ip>:443 
* Closing connection 0

And the sslh logs:

connecting to <my-external-ip>:4443 family 2 len 16
bind:98:Address already in use
bind_peer:98:Address already in use
connect: Address already in use

Sounds like this is fixed upstream by https://github.com/yrutschle/sslh/pull/69

Would be great to see the fix make it into Debian soon.


-- System Information:
Debian Release: 8.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to 
en_GB.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages sslh depends on:
ii  adduser              3.113+nmu3
ii  debconf              1.5.56
ii  init-system-helpers  1.22
ii  libc6                2.19-18+deb8u4
ii  libcap2              1:2.24-8
ii  libconfig9           1.4.9-2
ii  libwrap0             7.6.q-25
ii  lsb-base             4.1+Debian13+nmu1
ii  update-inetd         4.43

Versions of packages sslh recommends:
ii  apache2 [httpd]              2.4.10-10+deb8u4
ii  apache2-mpm-worker [httpd]   2.4.10-10+deb8u4
ii  openssh-server [ssh-server]  1:6.7p1-5+deb8u2

Versions of packages sslh suggests:
ii  openbsd-inetd [inet-superserver]  0.20140418-2

-- Configuration Files:
/etc/default/sslh changed [not included]

-- debconf information:
* sslh/inetd_or_standalone: standalone

Reply via email to