Starting Stunnel with configuration: pid = /usr/local/var/run/stunnel.pid foreground = yes debug = debug sslVersion = all [zookeeper-2181] client = yes CAfile = /tmp/cluster-ca.crt cert = /etc/cluster-operator-certs/cluster-operator.crt key = /etc/cluster-operator-certs/cluster-operator.key accept = 0.0.0.0:2181 connect = onap-strimzi-zookeeper-client:2181 delay = yes verify = 2 2023.02.22 11:24:02 LOG7[1:139627568441408]: Clients allowed=512000 2023.02.22 11:24:02 LOG5[1:139627568441408]: stunnel 4.56 on x86_64-redhat-linux-gnu platform 2023.02.22 11:24:02 LOG5[1:139627568441408]: Compiled/running with OpenSSL 1.0.1e-fips 11 Feb 2013 2023.02.22 11:24:02 LOG5[1:139627568441408]: Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS Auth:LIBWRAP 2023.02.22 11:24:02 LOG5[1:139627568441408]: Reading configuration from file /tmp/stunnel.conf 2023.02.22 11:24:02 LOG5[1:139627568441408]: FIPS mode is enabled 2023.02.22 11:24:02 LOG7[1:139627568441408]: Compression not enabled 2023.02.22 11:24:02 LOG7[1:139627568441408]: PRNG seeded successfully 2023.02.22 11:24:02 LOG6[1:139627568441408]: Initializing service [zookeeper-2181] 2023.02.22 11:24:02 LOG7[1:139627568441408]: Certificate: /etc/cluster-operator-certs/cluster-operator.crt 2023.02.22 11:24:02 LOG7[1:139627568441408]: Certificate loaded 2023.02.22 11:24:02 LOG7[1:139627568441408]: Key file: /etc/cluster-operator-certs/cluster-operator.key 2023.02.22 11:24:02 LOG7[1:139627568441408]: Private key loaded 2023.02.22 11:24:02 LOG7[1:139627568441408]: Loaded verify certificates from /tmp/cluster-ca.crt 2023.02.22 11:24:02 LOG7[1:139627568441408]: Loaded /tmp/cluster-ca.crt revocation lookup file 2023.02.22 11:24:02 LOG7[1:139627568441408]: SSL options set: 0x01000004 2023.02.22 11:24:02 LOG5[1:139627568441408]: Configuration successful 2023.02.22 11:24:02 LOG7[1:139627568441408]: Service [zookeeper-2181] (FD=11) bound to 0.0.0.0:2181 2023.02.22 11:24:02 LOG7[1:139627568441408]: Created pid file /usr/local/var/run/stunnel.pid 2023.02.22 11:25:11 LOG7[1:139627568441408]: Service [zookeeper-2181] accepted (FD=3) from 127.0.0.1:53360 2023.02.22 11:25:11 LOG7[1:139627568436992]: Service [zookeeper-2181] started 2023.02.22 11:25:11 LOG7[1:139627568436992]: Waiting for a libwrap process 2023.02.22 11:25:11 LOG7[1:139627568436992]: Acquired libwrap process #0 2023.02.22 11:25:11 LOG7[1:139627568436992]: Releasing libwrap process #0 2023.02.22 11:25:11 LOG7[1:139627568436992]: Released libwrap process #0 2023.02.22 11:25:11 LOG7[1:139627568436992]: Service [zookeeper-2181] permitted by libwrap from 127.0.0.1:53360 2023.02.22 11:25:11 LOG5[1:139627568436992]: Service [zookeeper-2181] accepted connection from 127.0.0.1:53360 2023.02.22 11:25:11 LOG6[1:139627568436992]: connect_blocking: connecting 10.233.37.49:2181 2023.02.22 11:25:11 LOG7[1:139627568436992]: connect_blocking: s_poll_wait 10.233.37.49:2181: waiting 10 seconds 2023.02.22 11:25:11 LOG5[1:139627568436992]: connect_blocking: connected 10.233.37.49:2181 2023.02.22 11:25:11 LOG5[1:139627568436992]: Service [zookeeper-2181] connected remote server from 10.233.67.58:49232 2023.02.22 11:25:11 LOG7[1:139627568436992]: Remote socket (FD=12) initialized 2023.02.22 11:25:11 LOG7[1:139627568436992]: SNI: sending servername: onap-strimzi-zookeeper-client 2023.02.22 11:25:11 LOG7[1:139627568436992]: SSL state (connect): before/connect initialization 2023.02.22 11:25:11 LOG7[1:139627568436992]: SSL state (connect): SSLv2/v3 write client hello A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 read server hello A 2023.02.22 11:25:12 LOG7[1:139627568436992]: Starting certificate verification: depth=1, /O=io.strimzi/CN=cluster-ca v0 2023.02.22 11:25:12 LOG5[1:139627568436992]: Certificate accepted: depth=1, /O=io.strimzi/CN=cluster-ca v0 2023.02.22 11:25:12 LOG7[1:139627568436992]: Starting certificate verification: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper 2023.02.22 11:25:12 LOG5[1:139627568436992]: Certificate accepted: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 read server certificate A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 read server key exchange A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 read server certificate request A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 read server done A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 write client certificate A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 write client key exchange A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 write certificate verify A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 write change cipher spec A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 write finished A 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 flush data 2023.02.22 11:25:12 LOG7[1:139627568436992]: SSL state (connect): SSLv3 read finished A 2023.02.22 11:25:12 LOG7[1:139627568436992]: 1 items in the session cache 2023.02.22 11:25:12 LOG7[1:139627568436992]: 1 client connects (SSL_connect()) 2023.02.22 11:25:12 LOG7[1:139627568436992]: 1 client connects that finished 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 client renegotiations requested 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 server connects (SSL_accept()) 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 server connects that finished 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 server renegotiations requested 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 session cache hits 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 external session cache hits 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 session cache misses 2023.02.22 11:25:12 LOG7[1:139627568436992]: 0 session cache timeouts 2023.02.22 11:25:12 LOG6[1:139627568436992]: SSL connected: new session negotiated 2023.02.22 11:25:12 LOG6[1:139627568436992]: Negotiated protocol version: TLSv1.2 2023.02.22 11:25:12 LOG6[1:139627568436992]: Negotiated TLSv1/SSLv3 ciphersuite: ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption) 2023.02.22 11:25:12 LOG6[1:139627568436992]: Compression: null, expansion: null 2023.02.22 11:25:12 LOG7[1:139627568441408]: Service [zookeeper-2181] accepted (FD=13) from 127.0.0.1:53378 2023.02.22 11:25:12 LOG7[1:139627568367360]: Service [zookeeper-2181] started 2023.02.22 11:25:12 LOG7[1:139627568367360]: Waiting for a libwrap process 2023.02.22 11:25:12 LOG7[1:139627568367360]: Acquired libwrap process #0 2023.02.22 11:25:12 LOG7[1:139627568367360]: Releasing libwrap process #0 2023.02.22 11:25:12 LOG7[1:139627568367360]: Released libwrap process #0 2023.02.22 11:25:12 LOG7[1:139627568367360]: Service [zookeeper-2181] permitted by libwrap from 127.0.0.1:53378 2023.02.22 11:25:12 LOG5[1:139627568367360]: Service [zookeeper-2181] accepted connection from 127.0.0.1:53378 2023.02.22 11:25:12 LOG6[1:139627568367360]: connect_blocking: connecting 10.233.37.49:2181 2023.02.22 11:25:12 LOG7[1:139627568367360]: connect_blocking: s_poll_wait 10.233.37.49:2181: waiting 10 seconds 2023.02.22 11:25:12 LOG5[1:139627568367360]: connect_blocking: connected 10.233.37.49:2181 2023.02.22 11:25:12 LOG5[1:139627568367360]: Service [zookeeper-2181] connected remote server from 10.233.67.58:47546 2023.02.22 11:25:12 LOG7[1:139627568367360]: Remote socket (FD=14) initialized 2023.02.22 11:25:12 LOG7[1:139627568367360]: SNI: sending servername: onap-strimzi-zookeeper-client 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): before/connect initialization 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 write client hello A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 read server hello A 2023.02.22 11:25:12 LOG7[1:139627568367360]: Starting certificate verification: depth=1, /O=io.strimzi/CN=cluster-ca v0 2023.02.22 11:25:12 LOG5[1:139627568367360]: Certificate accepted: depth=1, /O=io.strimzi/CN=cluster-ca v0 2023.02.22 11:25:12 LOG7[1:139627568367360]: Starting certificate verification: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper 2023.02.22 11:25:12 LOG5[1:139627568367360]: Certificate accepted: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 read server certificate A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 read server key exchange A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 read server certificate request A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 read server done A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 write client certificate A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 write client key exchange A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 write certificate verify A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 write change cipher spec A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 write finished A 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 flush data 2023.02.22 11:25:12 LOG7[1:139627568367360]: SSL state (connect): SSLv3 read finished A 2023.02.22 11:25:12 LOG7[1:139627568367360]: 2 items in the session cache 2023.02.22 11:25:12 LOG7[1:139627568367360]: 2 client connects (SSL_connect()) 2023.02.22 11:25:12 LOG7[1:139627568367360]: 2 client connects that finished 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 client renegotiations requested 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 server connects (SSL_accept()) 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 server connects that finished 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 server renegotiations requested 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 session cache hits 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 external session cache hits 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 session cache misses 2023.02.22 11:25:12 LOG7[1:139627568367360]: 0 session cache timeouts 2023.02.22 11:25:12 LOG6[1:139627568367360]: SSL connected: new session negotiated 2023.02.22 11:25:12 LOG6[1:139627568367360]: Negotiated protocol version: TLSv1.2 2023.02.22 11:25:12 LOG6[1:139627568367360]: Negotiated TLSv1/SSLv3 ciphersuite: ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption) 2023.02.22 11:25:12 LOG6[1:139627568367360]: Compression: null, expansion: null 2023.02.22 11:25:14 LOG7[1:139627568441408]: Service [zookeeper-2181] accepted (FD=15) from 127.0.0.1:53414 2023.02.22 11:25:14 LOG7[1:139627568256768]: Service [zookeeper-2181] started 2023.02.22 11:25:14 LOG7[1:139627568256768]: Waiting for a libwrap process 2023.02.22 11:25:14 LOG7[1:139627568256768]: Acquired libwrap process #0 2023.02.22 11:25:14 LOG7[1:139627568256768]: Releasing libwrap process #0 2023.02.22 11:25:14 LOG7[1:139627568256768]: Released libwrap process #0 2023.02.22 11:25:14 LOG7[1:139627568256768]: Service [zookeeper-2181] permitted by libwrap from 127.0.0.1:53414 2023.02.22 11:25:14 LOG5[1:139627568256768]: Service [zookeeper-2181] accepted connection from 127.0.0.1:53414 2023.02.22 11:25:14 LOG6[1:139627568256768]: connect_blocking: connecting 10.233.37.49:2181 2023.02.22 11:25:14 LOG7[1:139627568256768]: connect_blocking: s_poll_wait 10.233.37.49:2181: waiting 10 seconds 2023.02.22 11:25:14 LOG5[1:139627568256768]: connect_blocking: connected 10.233.37.49:2181 2023.02.22 11:25:14 LOG5[1:139627568256768]: Service [zookeeper-2181] connected remote server from 10.233.67.58:47582 2023.02.22 11:25:14 LOG7[1:139627568256768]: Remote socket (FD=16) initialized 2023.02.22 11:25:14 LOG7[1:139627568256768]: SNI: sending servername: onap-strimzi-zookeeper-client 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): before/connect initialization 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 write client hello A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 read server hello A 2023.02.22 11:25:14 LOG7[1:139627568256768]: Starting certificate verification: depth=1, /O=io.strimzi/CN=cluster-ca v0 2023.02.22 11:25:14 LOG5[1:139627568256768]: Certificate accepted: depth=1, /O=io.strimzi/CN=cluster-ca v0 2023.02.22 11:25:14 LOG7[1:139627568256768]: Starting certificate verification: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper 2023.02.22 11:25:14 LOG5[1:139627568256768]: Certificate accepted: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 read server certificate A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 read server key exchange A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 read server certificate request A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 read server done A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 write client certificate A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 write client key exchange A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 write certificate verify A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 write change cipher spec A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 write finished A 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 flush data 2023.02.22 11:25:14 LOG7[1:139627568256768]: SSL state (connect): SSLv3 read finished A 2023.02.22 11:25:14 LOG7[1:139627568256768]: 3 items in the session cache 2023.02.22 11:25:14 LOG7[1:139627568256768]: 3 client connects (SSL_connect()) 2023.02.22 11:25:14 LOG7[1:139627568256768]: 3 client connects that finished 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 client renegotiations requested 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 server connects (SSL_accept()) 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 server connects that finished 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 server renegotiations requested 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 session cache hits 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 external session cache hits 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 session cache misses 2023.02.22 11:25:14 LOG7[1:139627568256768]: 0 session cache timeouts 2023.02.22 11:25:14 LOG6[1:139627568256768]: SSL connected: new session negotiated 2023.02.22 11:25:14 LOG6[1:139627568256768]: Negotiated protocol version: TLSv1.2 2023.02.22 11:25:14 LOG6[1:139627568256768]: Negotiated TLSv1/SSLv3 ciphersuite: ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption) 2023.02.22 11:25:14 LOG6[1:139627568256768]: Compression: null, expansion: null