Are there any special problems with Stunnel and IE?
Per Mike: It’s a well known problem with Internet Explorer and several other products. They don’t send close_notify message before TCP FIN packet violating SSLv3 and TLSv1 protocols. It is also a security problem: Microsoft applications are vulnerable to truncation attacks. Is Microsoft able to implement anything properly? Currently stunnel implements ugly 10-seconds timeout to work with Microsoft… I hate it, but several peple need it. See RFC 2246 chapter 7.2.1. for details. • I’m running out of processes/file descriptors From Mike: How can I increase the number of file descriptors per process in Solaris? In 2.3 in earlier this requires poking the kernel. In Solaris 2.4+, this can be accomplished by adding the following lines to /etc/system: * set hard limit on file descriptors set rlim_fd_max = 4096 * set soft limit on file descriptors set rlim_fd_cur = 1024 Raising the soft limit past 256 may confuse certain applications, especially BCP applications. Raising the limit past 1024 ma
