【问题标题】:docker: vimagick/stunnel ==> /entrypoint.sh: line 21: openssl: not found码头工人:vimagick/stunnel ==> /entrypoint.sh:第 21 行:openssl:未找到
【发布时间】:2020-05-19 18:45:10
【问题描述】:

我正在开发一个 ubuntu 18.04.4 LTS 虚拟机,我安装了 docker 和 docker-compose。

我正在使用 vimagick / stunnel 映像为客户端构建隧道以提供 quickFix 服务。

问题:在新安装中,当我提出 docker-compose 文件时,抛出以下错误:

tunnel_primary_1  | chmod: stunnel.pem: No such file or directory
tunnel_primary_1  | [ ] Clients allowed=512000
tunnel_primary_1  | [.] stunnel 5.56 on x86_64-alpine-linux-musl platform
tunnel_primary_1  | [.] Compiled/running with OpenSSL 1.1.1d  10 Sep 2019
tunnel_primary_1  | [.] Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,OCSP,PSK,SNI
tunnel_primary_1  | [ ] errno: (*__errno_location())
tunnel_primary_1  | [.] Reading configuration from file /etc/stunnel/stunnel.conf
tunnel_primary_1  | [.] UTF-8 byte order mark not detected
tunnel_primary_1  | [ ] No PRNG seeding was required
tunnel_primary_1  | [ ] Initializing service [quickfix]
tunnel_primary_1  | [ ] Ciphers: HIGH:!aNULL:!SSLv2:!DH:!kDHEPSK
tunnel_primary_1  | [ ] TLSv1.3 ciphersuites: TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256
tunnel_primary_1  | [ ] TLS options: 0x02100004 (+0x00000000, -0x00000000)
tunnel_primary_1  | [ ] Loading certificate from file: /etc/stunnel/stunnel.pem
tunnel_primary_1  | [!] error queue: ssl/ssl_rsa.c:615: error:140DC002:SSL routines:use_certificate_chain_file:system lib
tunnel_primary_1  | [!] error queue: crypto/bio/bss_file.c:290: error:20074002:BIO routines:file_ctrl:system lib
tunnel_primary_1  | [!] SSL_CTX_use_certificate_chain_file: crypto/bio/bss_file.c:288: error:02001002:system library:fopen:No such file or directory
tunnel_primary_1  | [!] Service [quickfix]: Failed to initialize TLS context
tunnel_primary_1  | [ ] Deallocating section defaults
prueba1_tunnel_primary_1 exited with code 1

这是 mi docker-compose.yml:

version: '3'

services:

 tunnel_primary:
   image: vimagick/stunnel
   ports:
     - "6789:6789"
   environment:
     - CLIENT=yes
     - SERVICE=quickfix
     - ACCEPT=0.0.0.0:6789
     - CONNECT=11.11.11.11:1234
   logging:
     driver: "json-file"
     options:
       max-size: "1024k"
       max-file: "10"

在生产中的虚拟机中它可以工作并且没有安装差异。是的,我在生产中使用的docker vimagick / stunnel的镜像是7个月前的

谢谢!!!!!!

【问题讨论】:

    标签: docker docker-compose openssl vpn stunnel


    【解决方案1】:

    自从他们切换到 libressl 后,此 docker 映像已损坏(未更新仍使用 openssl 的启动脚本)。

    有一个pull request 解决了这个问题,它将(希望)被合并。

    与此同时,您可以分叉包含 docker 文件的 repo,并通过将 openssl 替换为 libressl 来修改 dockerfiles/stunnel/docker-entrypoint.sh

    我最终在docker hub 上重新创建了一个新图像,在您的docker-compose.yml 文件中使用prokofyevdmitry/stunnel 而不是vimagik/stunnel

    【讨论】:

      猜你喜欢
      • 2020-09-29
      • 1970-01-01
      • 1970-01-01
      • 1970-01-01
      • 2013-04-19
      • 1970-01-01
      • 2017-02-01
      • 2020-05-22
      • 1970-01-01
      相关资源
      最近更新 更多