O.k. here's my setup hermes 208.210.145.141 test mysqld bender 208.210.145.139 webserver (I am currently running a mysqld on :3306 on this box, hence the 13306 below) on hermes I am running mysqld --bind-address=127.0.0.1 and stunnel -d 208.210.145.141:13306 -r 127.0.0.1:3306 on bender I am running stunnel -c -d 127.0.0.1:13306 -r 208.210.145.141:13306 I wanna talk to hermes' mysqld from bender via a ssl-tunnel. This is just a test, if I can get this to work, I'll be punching through a firewall with stunnel. when I run mysql -h 127.0.0.1 --port=13306 on bender I get ERROR 2013: Lost connection to MySQL server during query and this in the log Mar 19 17:59:17 bender stunnel[8325]: 208.210.145.141.13306 connected from 127.0.0.1:3965 Mar 19 17:59:17 bender stunnel[8325]: SSL_connect: error:00000000::lib(0) :func(0) :reason(0) and on hermes when I do the above I get Mar 19 18:02:47 hermes stunnel[7186]: 127.0.0.1.3306 connected from 208.210.145.139:3968 Mar 19 18:02:47 hermes stunnel[7186]: remote connect: Connection refused (111) I saw this faq on stunnel.org: SSL_accept: error:00000000::lib(0) :func(0) :reason(0) I get the error SSL_accept: error:00000000::lib(0) :func(0) :reason(0) What does it mean? Answer: That error means that your client has closed the connection before SSL was negotiated. That probably means that you're trying to connect to your stunnel daemon with a non-SSL client. Make sure you are using SSL on your client. Hey veldy how did you get around this? Are you able to run the mysql command line app through stunnel? If not, I assume your webserver can talk to mysqld through it, did you have to do anything wierd with your CGI? -- Ben Lutgens cell: 612.670.4789 Sistina Software Inc. work: 612.379.3951 Code Monkey Support (A.K.A. System Administrator) "It's hard to believe that's the same frail woman who once sprained her wrist from having too much dip on a cracker!" -- Frazier Crane -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 232 bytes Desc: not available Url : http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20010319/d40a4429/attachment.pgp