Hello everyone,

I currently test pound 1.8.3 with SSL V3 by stressing the server with 
WAPT (stress server tool).  At the end of the test, I have 100% of 
packet in error.  After, when I want to connect on the server, I have a 
firefox error message  "message authentication codes..." it is an error 
TLS "20" "Bad Record Mac".  When I Pound starts again, all becomes again 
normal!

do you know how to fix it or where the problem comes from?

thanks a lot

Urien Ronan wrote:
[...]
Pound 1.8.5 changelog mentioned something about SSL.  Please try that 
version and let us know how it goes.

File:  http://www.apsis.ch/pound/Pound-1.8.5.tgz
Signed: http://www.apsis.ch/pound/Pound-1.8.5.asc
Signature: http://www.apsis.ch/pound/roseg.asc


Changelogs for 1.8.5 and 1.8.4 are as follows:

Changes in Pound v1.8.5, primarily a bug-fix interim release:

- added a CRLlist configuration directive. This allows putting the CRL
in a separate file (as opposed to the CAlist). Probably cleaner that
way.

- tweaked the final SSL_shutdown - some people have complained that it
caused problems with non-MS browsers and/or WebDAV clients. Let me know
how it works.

Changes in Pound v1.8.4, primarily a bug-fix interim release:

- added a -c run-time switch (check-only). Running Pound with this flag
will cause it to process the config file and exit immediately
afterwards.

- added a -v run-time switch (verbose). Running Pound with this flag
will cause it to show error messages to the standard error even if the
program was configured to use syslog, at least until the program
"daemonizes" itself. This allows you to see on screen any errors that
may occur while processing the config file and early run-time errors
(conflicting ports, etc).

- based on ideas from various people here modified the pid file
mechanism: instead of creating a file pound_pid.nnn Pound will now
append its process number to a file called pound.pid (fixed name). The
file may contain more than one pid if you have multiple Pound instances.

On Wed, 25 May 2005 15:53:47 +0200 Urien Ronan
<ronan.urien(at)wanadoo.fr>
wrote:[...]

We have occasionally seen this when Pound was using non-threaded OpenSSL
libraries. I suggest you have a good look at your setup, particularly if
you have compiled a dedicated OpenSSL version for Pound (depending on
system LD_LIBRARY_PATH or static/dynamic libraries conflicts are
possible).[...]