By type
Starting Stunnel with configuration:
pid = /usr/local/var/run/stunnel.pid
foreground = yes
debug = debug
sslVersion = all
[zookeeper-2181]
client = yes
CAfile = /tmp/cluster-ca.crt
cert = /etc/cluster-operator-certs/cluster-operator.crt
key = /etc/cluster-operator-certs/cluster-operator.key
accept = 0.0.0.0:2181
connect = onap-strimzi-zookeeper-client:2181
delay = yes
verify = 2
2022.05.12 12:16:14 LOG7[1:140551517644864]: Clients allowed=512000
2022.05.12 12:16:14 LOG5[1:140551517644864]: stunnel 4.56 on x86_64-redhat-linux-gnu platform
2022.05.12 12:16:14 LOG5[1:140551517644864]: Compiled/running with OpenSSL 1.0.1e-fips 11 Feb 2013
2022.05.12 12:16:14 LOG5[1:140551517644864]: Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS Auth:LIBWRAP
2022.05.12 12:16:14 LOG5[1:140551517644864]: Reading configuration from file /tmp/stunnel.conf
2022.05.12 12:16:14 LOG5[1:140551517644864]: FIPS mode is enabled
2022.05.12 12:16:14 LOG7[1:140551517644864]: Compression not enabled
2022.05.12 12:16:14 LOG7[1:140551517644864]: PRNG seeded successfully
2022.05.12 12:16:14 LOG6[1:140551517644864]: Initializing service [zookeeper-2181]
2022.05.12 12:16:14 LOG7[1:140551517644864]: Certificate: /etc/cluster-operator-certs/cluster-operator.crt
2022.05.12 12:16:14 LOG7[1:140551517644864]: Certificate loaded
2022.05.12 12:16:14 LOG7[1:140551517644864]: Key file: /etc/cluster-operator-certs/cluster-operator.key
2022.05.12 12:16:14 LOG7[1:140551517644864]: Private key loaded
2022.05.12 12:16:14 LOG7[1:140551517644864]: Loaded verify certificates from /tmp/cluster-ca.crt
2022.05.12 12:16:14 LOG7[1:140551517644864]: Loaded /tmp/cluster-ca.crt revocation lookup file
2022.05.12 12:16:14 LOG7[1:140551517644864]: SSL options set: 0x01000004
2022.05.12 12:16:14 LOG5[1:140551517644864]: Configuration successful
2022.05.12 12:16:14 LOG7[1:140551517644864]: Service [zookeeper-2181] (FD=11) bound to 0.0.0.0:2181
2022.05.12 12:16:14 LOG7[1:140551517644864]: Created pid file /usr/local/var/run/stunnel.pid
2022.05.12 12:16:27 LOG7[1:140551517644864]: Service [zookeeper-2181] accepted (FD=3) from 127.0.0.1:40726
2022.05.12 12:16:27 LOG7[1:140551517640448]: Service [zookeeper-2181] started
2022.05.12 12:16:27 LOG7[1:140551517640448]: Waiting for a libwrap process
2022.05.12 12:16:27 LOG7[1:140551517640448]: Acquired libwrap process #0
2022.05.12 12:16:27 LOG7[1:140551517640448]: Releasing libwrap process #0
2022.05.12 12:16:27 LOG7[1:140551517640448]: Released libwrap process #0
2022.05.12 12:16:27 LOG7[1:140551517640448]: Service [zookeeper-2181] permitted by libwrap from 127.0.0.1:40726
2022.05.12 12:16:27 LOG5[1:140551517640448]: Service [zookeeper-2181] accepted connection from 127.0.0.1:40726
2022.05.12 12:16:27 LOG6[1:140551517640448]: connect_blocking: connecting 10.233.43.38:2181
2022.05.12 12:16:27 LOG7[1:140551517640448]: connect_blocking: s_poll_wait 10.233.43.38:2181: waiting 10 seconds
2022.05.12 12:16:27 LOG5[1:140551517640448]: connect_blocking: connected 10.233.43.38:2181
2022.05.12 12:16:27 LOG5[1:140551517640448]: Service [zookeeper-2181] connected remote server from 10.233.65.120:47852
2022.05.12 12:16:27 LOG7[1:140551517640448]: Remote socket (FD=12) initialized
2022.05.12 12:16:27 LOG7[1:140551517640448]: SNI: sending servername: onap-strimzi-zookeeper-client
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): before/connect initialization
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv2/v3 write client hello A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 read server hello A
2022.05.12 12:16:27 LOG7[1:140551517640448]: Starting certificate verification: depth=1, /O=io.strimzi/CN=cluster-ca v0
2022.05.12 12:16:27 LOG5[1:140551517640448]: Certificate accepted: depth=1, /O=io.strimzi/CN=cluster-ca v0
2022.05.12 12:16:27 LOG7[1:140551517640448]: Starting certificate verification: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper
2022.05.12 12:16:27 LOG5[1:140551517640448]: Certificate accepted: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 read server certificate A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 read server key exchange A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 read server certificate request A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 read server done A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 write client certificate A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 write client key exchange A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 write certificate verify A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 write change cipher spec A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 write finished A
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 flush data
2022.05.12 12:16:27 LOG7[1:140551517640448]: SSL state (connect): SSLv3 read finished A
2022.05.12 12:16:27 LOG7[1:140551517640448]: 1 items in the session cache
2022.05.12 12:16:27 LOG7[1:140551517640448]: 1 client connects (SSL_connect())
2022.05.12 12:16:27 LOG7[1:140551517640448]: 1 client connects that finished
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 client renegotiations requested
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 server connects (SSL_accept())
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 server connects that finished
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 server renegotiations requested
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 session cache hits
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 external session cache hits
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 session cache misses
2022.05.12 12:16:27 LOG7[1:140551517640448]: 0 session cache timeouts
2022.05.12 12:16:27 LOG6[1:140551517640448]: SSL connected: new session negotiated
2022.05.12 12:16:27 LOG6[1:140551517640448]: Negotiated protocol version: TLSv1.2
2022.05.12 12:16:27 LOG6[1:140551517640448]: Negotiated TLSv1/SSLv3 ciphersuite: ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption)
2022.05.12 12:16:27 LOG6[1:140551517640448]: Compression: null, expansion: null
2022.05.12 12:16:27 LOG7[1:140551517644864]: Service [zookeeper-2181] accepted (FD=13) from 127.0.0.1:40738
2022.05.12 12:16:27 LOG7[1:140551517570816]: Service [zookeeper-2181] started
2022.05.12 12:16:27 LOG7[1:140551517570816]: Waiting for a libwrap process
2022.05.12 12:16:27 LOG7[1:140551517570816]: Acquired libwrap process #0
2022.05.12 12:16:27 LOG7[1:140551517570816]: Releasing libwrap process #0
2022.05.12 12:16:27 LOG7[1:140551517570816]: Released libwrap process #0
2022.05.12 12:16:27 LOG7[1:140551517570816]: Service [zookeeper-2181] permitted by libwrap from 127.0.0.1:40738
2022.05.12 12:16:27 LOG5[1:140551517570816]: Service [zookeeper-2181] accepted connection from 127.0.0.1:40738
2022.05.12 12:16:27 LOG6[1:140551517570816]: connect_blocking: connecting 10.233.43.38:2181
2022.05.12 12:16:27 LOG7[1:140551517570816]: connect_blocking: s_poll_wait 10.233.43.38:2181: waiting 10 seconds
2022.05.12 12:16:27 LOG5[1:140551517570816]: connect_blocking: connected 10.233.43.38:2181
2022.05.12 12:16:27 LOG5[1:140551517570816]: Service [zookeeper-2181] connected remote server from 10.233.65.120:47862
2022.05.12 12:16:27 LOG7[1:140551517570816]: Remote socket (FD=14) initialized
2022.05.12 12:16:27 LOG7[1:140551517570816]: SNI: sending servername: onap-strimzi-zookeeper-client
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): before/connect initialization
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 write client hello A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 read server hello A
2022.05.12 12:16:27 LOG7[1:140551517570816]: Starting certificate verification: depth=1, /O=io.strimzi/CN=cluster-ca v0
2022.05.12 12:16:27 LOG5[1:140551517570816]: Certificate accepted: depth=1, /O=io.strimzi/CN=cluster-ca v0
2022.05.12 12:16:27 LOG7[1:140551517570816]: Starting certificate verification: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper
2022.05.12 12:16:27 LOG5[1:140551517570816]: Certificate accepted: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 read server certificate A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 read server key exchange A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 read server certificate request A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 read server done A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 write client certificate A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 write client key exchange A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 write certificate verify A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 write change cipher spec A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 write finished A
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 flush data
2022.05.12 12:16:27 LOG7[1:140551517570816]: SSL state (connect): SSLv3 read finished A
2022.05.12 12:16:27 LOG7[1:140551517570816]: 2 items in the session cache
2022.05.12 12:16:27 LOG7[1:140551517570816]: 2 client connects (SSL_connect())
2022.05.12 12:16:27 LOG7[1:140551517570816]: 2 client connects that finished
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 client renegotiations requested
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 server connects (SSL_accept())
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 server connects that finished
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 server renegotiations requested
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 session cache hits
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 external session cache hits
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 session cache misses
2022.05.12 12:16:27 LOG7[1:140551517570816]: 0 session cache timeouts
2022.05.12 12:16:27 LOG6[1:140551517570816]: SSL connected: new session negotiated
2022.05.12 12:16:27 LOG6[1:140551517570816]: Negotiated protocol version: TLSv1.2
2022.05.12 12:16:27 LOG6[1:140551517570816]: Negotiated TLSv1/SSLv3 ciphersuite: ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption)
2022.05.12 12:16:27 LOG6[1:140551517570816]: Compression: null, expansion: null
2022.05.12 12:16:28 LOG7[1:140551517644864]: Service [zookeeper-2181] accepted (FD=15) from 127.0.0.1:40756
2022.05.12 12:16:28 LOG7[1:140551517460224]: Service [zookeeper-2181] started
2022.05.12 12:16:28 LOG7[1:140551517460224]: Waiting for a libwrap process
2022.05.12 12:16:28 LOG7[1:140551517460224]: Acquired libwrap process #0
2022.05.12 12:16:28 LOG7[1:140551517460224]: Releasing libwrap process #0
2022.05.12 12:16:28 LOG7[1:140551517460224]: Released libwrap process #0
2022.05.12 12:16:28 LOG7[1:140551517460224]: Service [zookeeper-2181] permitted by libwrap from 127.0.0.1:40756
2022.05.12 12:16:28 LOG5[1:140551517460224]: Service [zookeeper-2181] accepted connection from 127.0.0.1:40756
2022.05.12 12:16:28 LOG6[1:140551517460224]: connect_blocking: connecting 10.233.43.38:2181
2022.05.12 12:16:28 LOG7[1:140551517460224]: connect_blocking: s_poll_wait 10.233.43.38:2181: waiting 10 seconds
2022.05.12 12:16:28 LOG5[1:140551517460224]: connect_blocking: connected 10.233.43.38:2181
2022.05.12 12:16:28 LOG5[1:140551517460224]: Service [zookeeper-2181] connected remote server from 10.233.65.120:48016
2022.05.12 12:16:28 LOG7[1:140551517460224]: Remote socket (FD=16) initialized
2022.05.12 12:16:28 LOG7[1:140551517460224]: SNI: sending servername: onap-strimzi-zookeeper-client
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): before/connect initialization
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 write client hello A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 read server hello A
2022.05.12 12:16:28 LOG7[1:140551517460224]: Starting certificate verification: depth=1, /O=io.strimzi/CN=cluster-ca v0
2022.05.12 12:16:28 LOG5[1:140551517460224]: Certificate accepted: depth=1, /O=io.strimzi/CN=cluster-ca v0
2022.05.12 12:16:28 LOG7[1:140551517460224]: Starting certificate verification: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper
2022.05.12 12:16:28 LOG5[1:140551517460224]: Certificate accepted: depth=0, /O=io.strimzi/CN=onap-strimzi-zookeeper
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 read server certificate A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 read server key exchange A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 read server certificate request A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 read server done A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 write client certificate A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 write client key exchange A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 write certificate verify A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 write change cipher spec A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 write finished A
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 flush data
2022.05.12 12:16:28 LOG7[1:140551517460224]: SSL state (connect): SSLv3 read finished A
2022.05.12 12:16:28 LOG7[1:140551517460224]: 3 items in the session cache
2022.05.12 12:16:28 LOG7[1:140551517460224]: 3 client connects (SSL_connect())
2022.05.12 12:16:28 LOG7[1:140551517460224]: 3 client connects that finished
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 client renegotiations requested
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 server connects (SSL_accept())
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 server connects that finished
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 server renegotiations requested
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 session cache hits
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 external session cache hits
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 session cache misses
2022.05.12 12:16:28 LOG7[1:140551517460224]: 0 session cache timeouts
2022.05.12 12:16:28 LOG6[1:140551517460224]: SSL connected: new session negotiated
2022.05.12 12:16:28 LOG6[1:140551517460224]: Negotiated protocol version: TLSv1.2
2022.05.12 12:16:28 LOG6[1:140551517460224]: Negotiated TLSv1/SSLv3 ciphersuite: ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption)
2022.05.12 12:16:28 LOG6[1:140551517460224]: Compression: null, expansion: null