Questions tagged [stunnel]
The stunnel tag has no usage guidance.
39
questions
0
votes
1
answer
313
views
Running multiple virtual hosts behind stunnel
I am currently running a setup designed to let me ssh into my server through firewalls, using stunnel and port 443, while also running a webserver from that same machine. This is demonstrated in the ...
0
votes
0
answers
1k
views
Configuring Stunnel on windows - TLS error for certificate
I can't get Stunnel (5.69) to start on Windows 2022 server. I have a Sectigo certificate with full chain that is PEM-encoded but I get this error:
Server is down
[ ] Initializing inetd mode ...
4
votes
2
answers
7k
views
Self-signed certificate with stunnel on linux
I'm trying to connect to an application over stunnel 5.44 on ubuntu 18.04. I'm using a config from a setup that is working on Windows and MacOS. It seems like the client is rejecting the authorisation ...
0
votes
1
answer
199
views
Can stunnel use the OS's certifificate store?
I'm using stunnel in "client" mode to enable my non-SSL client to connect to an SSL server (it's using FIX protocol).
My set up works fine if I disable verification but then of course I'm ...
0
votes
0
answers
567
views
What's a way to proxy an https site to an http endpoint?
I've got a piece of software that doesn't support https, only http.
I'm trying to access a secure website from it. I want to create an endpoint at http://localhost:80 to https://securesite.com (443). ...
0
votes
0
answers
618
views
Stunnel a web service client configuration error
In Stunnel,I have this configuration:
[ws]
client = yes
accept = 127.0.0.1:80
connect = webservice.it:443
I make a http request to 127.0.0.1:80 and I want that stunnel redirect to webservice.it:443.
...
5
votes
3
answers
15k
views
SSL proxy with stunnel
I'm trying to set an SSL connection with stunnel. Some kind of SSL proxy.
Final aim
Connect http only CLIENT to https only SERVER.
My plan is
CLIENT: change endpoint to PROXY
PROXY: use stunnel to ...
1
vote
0
answers
156
views
Is there a stunnel / other SSL tunnel equivalent of "ssh -D"?
I am trying to find a way to set up an SSL tunnel and use a SOCKS proxy in the same matter that I am using ssh -D <port>.
Is there any equivalent of doing so using stunnnel?
I am using a linux ...
0
votes
1
answer
761
views
OpenVPN through stunnel routing issues
I know this has been asked and answered many times, but i just can't make it work: I have a raspberry pi as an stunnel and openvpn server and an ubuntu client but although the connections seem correct,...
2
votes
1
answer
11k
views
How stop-start-restart-status stunnel as a service on centos 7.6
I've installed stunnel 4.5 on centos 7.6.
sudo yum -y install stunnel
Now i want to stop-start-restart-status stunnel as a service on centos 7.6.
The command below does not work :
systemctl ...
0
votes
2
answers
98
views
Tunnel secure TCP server
Which software can be used to protect (by password/certificate) access to tcp server (e.g. webserver)?
background: the tcp server software has no authentication and cannot be modified. the service ...
-2
votes
1
answer
168
views
Is it possible to have stunnel listen to specific path?
I am able to configure Stunnel to listen for 'myserver:port', however I'd like to be able to have Stunnel listen for a specific path e.g. 'myserver:port/path'
Does anyone happen to know if this is ...
3
votes
2
answers
9k
views
Redirect all web traffic (including https) through proxy server
I would like to setup a filtering mechanism for certain websites I use, including the ones served over https.
Privoxy provides this functionality, but only over http.
I'm pretty comfortable around ...
1
vote
0
answers
70
views
Is there a way to specify certs/Key content in stunnel configuration
I have a requirement where in I cannot specify the certificate and/or private key details as "files" to stunnel configuration, owing to the location and/or file system availability for stunnel to ...
3
votes
0
answers
5k
views
"Connection reset by peer" in both Stunnel server and client side
I'm trying to establish a Stunnel link between to system; a Linux server and a Windows client. Stunnel server and client show in their logs that they can reach each other but then they show the "...
1
vote
0
answers
196
views
Is it possible configure stunnel to accept any port
This is my stunnel conf located in /etc/network.d/stunnel.conf
[servertunnel]
accept=127.0.0.1:5001
connect=$server:5002
EOF
Here I want to change the port number to any port number. Because the ...
0
votes
1
answer
3k
views
Is there a way to define a port range in Stunnel?
I have multiple clients on the same box that will connect to the same domain. Each client needs to go through a different port. I can just define the entries multiple times, but is there an easier way ...
0
votes
1
answer
588
views
Wifi AP to OpenVPN + stunnel gateway on Debian/Ubuntu
I have set up an OpenVPN connection over stunnel4 from my raspberry pi to my public server. The connection works fine, and I can connect using ssh over this connection both ways just fine.
I have ...
0
votes
1
answer
391
views
stunnel without stunnel client or without admin rights
I'm not sure if this is possible, but I would like to access my SSL tunnel that is set on a Linux box without a stunnel client from the Windows box.
This is because I don't have admin rights on the ...
1
vote
0
answers
435
views
Stunnel does send received Emails
I'm trying to use stunnel to encrypt Emails and send them to a Gmail or Outlook accout, I've activated POP3/and IMAP clients. But when I run the program I get the following error message:
I've double ...
0
votes
1
answer
1k
views
openvpn sheathing with stunnel routing issues
I'm trying to configure a new OpenVPN server running on Ubuntu (distro doesn't matter to me), but tunneled inside of stunnel (to avoid DPI). My issue is if I have my client configured to route ...
0
votes
1
answer
313
views
Cygwin - STunnel doesn't respond anymore
I long used Cygwin 64bit and cygwin's package All/Net/stunnel: Universal TLS wrapper on my Windows 10 machine very happily.
Suddenly however, STunnel doesn't respond anymore. I know it's very vague, ...
2
votes
1
answer
2k
views
Stunnel PSK Error
I have build a anonymous stunnel 5.29 + squid 3.3 SSL proxy server for few purpose and I want to enable PSK authorization. The configuration of the stunnel server:
pid = /run/stunnel.pid
chroot = /...
0
votes
1
answer
282
views
How do I mimic stunnel functionality with opensource tools?
I want to create this setup, in which the browser is tricked to be talking to a HTTPS server but does not know that the content is coming from a normal IIS server.
browser -----> https 443 [proxy] ...
3
votes
0
answers
867
views
Sudo stunnel fails on Kubuntu 15.10 beta
When I execute the following command sudo stunnel /etc/stunnel/stunnel.conf then I get this message :
[ ] Clients allowed=500
[.] stunnel 5.18 on x86_64-pc-linux-gnu platform
[.] Compiled with ...
0
votes
2
answers
798
views
Postfix not connecting to postgres pool with local ip address
I have a postfix e-mail server that is contacting a database to query and verify e-mail addresses etc. It connects using pgbouncer to cycle through connections, however my problem was that the '...
0
votes
1
answer
2k
views
Apache - Disabled SNI
I'm having a bit of trouble with my webserver. Whenever I connect to Apache using SSL, I get a 400 Bad Request. I've looked in Apache's error log, and I see:
[ssl:error] [pid 30065] AH02032: ...
0
votes
1
answer
2k
views
Stunnel as a transparent proxy
I am interested in the following setup
firefox->(local) stunnel client-> (remote) stunnel server->forwarded to internet
I thought this would be possible if I made my stunnel client connect to ...
3
votes
1
answer
2k
views
How to properly use stunnel?
I'm trying to setup Wireshark ssl debugging, and to do this, I'm trying to follow instructions in this article.
I'm currently at stunnel part, and I'm trying to execute
sudo stunnel -p ps.pem -d ...
0
votes
1
answer
1k
views
Older e-mail client can't send through stunnel and Gmail SMTP server
I'm using an older e-mail client (Edit: Eudora 7.1.0.9 on Windows) which seems unable to send e-mail through Gmail's SMTP server, even after lowering the security per this article.
So I tried adding ...
4
votes
2
answers
4k
views
Simple proof-of-concept stunnel configuration
I am trying to setup stunnel to access a HTTPS web service from a HTTP-only client. Should be a piece of cake, right? I have the following stunnel.conf:
client=yes
verify=0
[test-https]
accept = ...
0
votes
1
answer
3k
views
readsocket: Connection reset by peer (WSAECONNRESET) (10054) [closed]
I'm using stunnel to tunnel SSL traffic to port 80. And up until today it's been working just fine. And indeed for a good amount of pages on my website it still works just fine but for some pages it ...
6
votes
1
answer
857
views
Reading email from Emacs VM using a secure server (Gmail)
This is a question (see below) originally entered at https://answers.launchpad.net/vm/+question/108267 and upon the recommendation of Uday Reddy the question and answers are being moved here. The ...
5
votes
2
answers
6k
views
How to make stunnel reload certificate files without restarting it?
I have a server with stunnel, to which clients connect. Each client has it's own self-signed certificate, and copy of that certificate lies in CApath directory on the server - so I am in control of ...
1
vote
0
answers
216
views
Stunnel internal error message
I get the stunnel error message:
INTERNAL ERROR: Bad magic at /home/ASchulma/dev/cygwin/stunnel/stunnel-4.49-1/s 6 [sig] stunnel 3920 open_stackdumpfile: Dumping stack trace to stunnel.exe....
1
vote
1
answer
3k
views
Can I use nc and/or stunnel to make a transparent SSL proxy such that I can specify the outgoing source port?
I've been playing around a bit with different variations and can't seem to find something that quite works.
I want to be able to 'bridge' an SSL connection across a particular gateway node in the ...
2
votes
1
answer
2k
views
Stunnel - how to generate pem file simply on Windows [closed]
Somebody suggest me stunnel.
We want to use for encrypt requests.
This is seems to be easier than OpenVPN.
The problem that I don't have SSH or other tool in the Windows server, and I don't have ...
3
votes
3
answers
255
views
Site to site network tunneling program
This will sound a bit strange, but I am looking for a(n) (open source?) program that I saw in a Google search some time ago. I cannot remember, for the life of me, what the site was.
The program ...
0
votes
1
answer
729
views
How can I create an external SSL wrapper/tunnel page for an insecure webpage behind a firewall?
I have an security cam with a built-in webpage inside my home network. That camera is using basic HTTP authentication instead of SSL. I want to be able to access the camera's webpage from outside my ...