The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
50 views

Https on HAproxy 1.4 using stunnel

I'm running a load balancing server with HAproxy and implementing Https using stunnel on the same machine, on the actual webpages end i've got 2 diferent webs, A and B, with similar behaviour. Here ...
1
vote
1answer
40 views

DER encoded hash

according to the manpage of stunnel4 the certificates in this directory should be named XXXXXXXX.0 where XXXXXXXX is the hash value of the DER encoded subject of the cert (the first 4 bytes of the ...
2
votes
1answer
60 views

What does this notice mean “SNI: extension not received from the client”, in stunnel log

I am working on multiple domain certificates using stunnel. I have two domains test.int and test1.int and given multiple certificates to each domain and one default certificate. I used sni option of ...
1
vote
1answer
108 views

Using multiple SSL certificates with Stunnel

I have a HAProxy + stunnel setup, I would like to have different certificates for my domain and submdomain. Certificate 1 - example.com Certificate 2 - foo.example.com How do I configure Stunnel to do ...
1
vote
1answer
46 views

How to best encrypt http traffic between frontent (VPS/AWS) and remote backend?

I have a couple of frontend servers running on AWS (running pound for SSL termination and Varnish for caching). My backend is at a remote location (not on AWS). I am looking for the best/fastest way ...
0
votes
1answer
111 views

Use stunnel for Socket.io SSL support

I am trying to add SSL support to my node.js app, while connecting via socket.io. The traffic to socket.io is going to port 80. I would like stunnel to grab encrypted traffic from port 443, unencrypt ...
0
votes
2answers
100 views

Stunnel multiple ports through the same Port

I'm looking for some help regarding an stunnel configuration I'm working on. Basically I want to have a DMZ machine accept inbound connections to port 80 and 110, and then forward them through my ...
0
votes
1answer
79 views

Does stunnel cache DNS?

I'm using stunnel in client mode to proxy between my Haproxy and a HTTPS backend server. I've read that Haproxy caches the resolved IPs on each config load, which isn't a problem in my current setup. ...
0
votes
0answers
33 views

Why does stunnel keep on reading the old pem file?

I've updated the pem file using the rekeyed certificate. But upon checking the certificate information through various SSL checkers, the old certificate was being read. I tried reloading the stunnel ...
1
vote
0answers
36 views

How can I update rekeyed certificates on stunnel?

I have configured stunnel using GoDaddy certificate and it was working fine. Due to some circumstances, I need to rekey the certificate and update the pem file on the load balancer. Upon updating the ...
1
vote
0answers
75 views

Stunnel only for specific domain

I'm configuring stunnel to encapsulate SSL petitions to Haproxy. Haproxy serves several sites in the same IP address: domain.com - Website app.domain.com - Node.js webserver I acquired an SSL ...
0
votes
0answers
188 views

Configuring stunnel on ubuntu machine

I just tried to configure stunnel on my local machine (OS:Ubuntu). Below is the message which I get on running the command 'stunnel &': No limit detected for the number of clients ...
1
vote
0answers
180 views

Issue connecting to Amazon RDS with stunnel on Windows

I'm trying to set up a local pgbouncer server that then connects using SSL to Amazon's PostgreSQL RDS service. According to pgbouncer's documentation, you need to use something like stunnel to ...
0
votes
1answer
291 views

stunnel client uses improper SNI when talking to Apache

I have stunnel listening on port 80 and acting as a client connecting to Apache listening on port 443. Configuration is below. What I'm finding is that if I attempt to connect to localhost:80 the ...
0
votes
1answer
134 views

Stunnel config loads succefully but it does not connect

i have a VPS and a running Stunnel service there, listening on port 80, on my client side, i have setup the stunnel and generated the .pem file succefully. Server conf: ;Certificate cert = ...
2
votes
1answer
182 views

Encrypting peer-to-peer application with iptables and stunnel

I'm running legacy applications in which I do not have access to the source code. These components talk to each other using plaintext on a particular port. I would like to be able to secure the ...
0
votes
0answers
244 views

stunnel: redirect HTTP traffic to HTTPS

Is it possible for stunnel to detect non-SSL requests and issue a redirect to HTTPS URL? Or maybe it's possible to have stunnel mark these requests somehow and let the underlying app issue the ...
1
vote
1answer
233 views

How do I get iPXE to boot from HTTPS server with self signed cert?

I am chainloading iPXE (undionly.kpxe) and using an embedded script wanting to boot from HTTPS. The problem is the HTTPS server is connecting to the http server (a custom service) via stunnel using a ...
1
vote
0answers
108 views

Keepalived, Junos, and ARP caching

I'm trying to configure an active-passive stunnel setup, with the aid of Keepalived, for a public IP address at our company datacenter. I would like to know if a router or switch reconfiguration is ...
1
vote
0answers
111 views

Stunnel + Varnish + Apache questions

I am currently running Varnish in front of apache for all http traffic. I added stunnel so as to take advantage of the cache for https connections as well. So, for https, stunnel talks to varnish ...
-1
votes
1answer
287 views

Stunnel and FIX

I am trying to use Stunnel to connect to a remote server through a proxy (I am using stunnel 4.56). Here is my config file stunnel.conf : cert = stunnel.pem key = stunnel.pem [https] accept = ...
0
votes
1answer
484 views

stunnel error when connecting from a news reader: SSL3_READ_BYTES:tlsv1 alert unknown ca

I'm trying to set up stunnel to provide secure access to an nntp server. Following the instructions here I created a self-signed key and certificate. The commands I ran were: openssl genrsa -des3 ...
0
votes
1answer
1k views

why is stunnel doing this

I am trying to setup stunnel to encrypt traffic from rsyslog (using the relp protocol), but whenever I try starting stunnel and sending logs to the remote server, i get the following: Remote ...
0
votes
1answer
383 views

stunnel can't bind to 0.0.0.0

I keep getting this error when trying to use stunnel to work between my sbs2003 server and office 365 mail server: stunnel: bind permission denied (wsaeacces) (10013) to 0.0.0.0:110 Does anyone ...
4
votes
3answers
3k views

Bug setting up stunnel server: `SSL3_GET_CLIENT_HELLO:wrong version number`

I'm setting up an stunnel server on Windows XP, and I get this bug when a client tries to access: 2013.02.14 00:02:16 LOG7[8848:7664]: Service [https] accepted (FD=320) from 107.20.36.147:56160 ...
0
votes
2answers
344 views

End to end encryption with CQ5 and Dispatcher

I am currently working on an Adobe CQ5 (CMS) application that will be serving sensitive information, so communications should be encrypted using SSL end-to-end. The problem is that it is not ...
0
votes
1answer
180 views

set _SERVER[“HTTPS”] to yes with stunnel Haproxy Nginx

I am trying to set the _SERVER["HTTPS"] php variable to yes on my web servers. Actually, https trafic come to stunnel which forward it to haproxy which forward it to my web servers running under ...
2
votes
1answer
1k views

Multiple SSL certs with Stunnel

I have purchased two PositiveSSL certs (seperately), one for manager.domain.com and another for domain.com. Originally I only needed manager.domain.com using SSL, but than I needed to use SSL on ...
1
vote
1answer
633 views

Redirect non-https traffic when using Varnish and nginx

I am using Stunnel, Varnish, and nginx with a nodejs app, and I'm having trouble redirecting non-https pages (http://manager.domain.com) to their respective https page (https://manager.domain.com). I ...
0
votes
0answers
379 views

Reverse tunnelling with “stunnel” in linux

Scenario: Central Log-Server(say logserv)- only private IP interfaces Multiple client servers (logclient)- has public IPs. Requirement: Need to tcp logs of syslog application from logclient to ...
0
votes
1answer
236 views

apache authentication stunnel

Apache is listening on port 80 and redirecting everything to https, which is handled by stunnel. If I put in authentication in it redirects before it does the authentication. Is there a way to handle ...
1
vote
0answers
242 views

stunnel Haproxy ldap authentication

in our setup port 433 is handled by stunnel. After that haproxy will dispatches the request to the appropriate backend. I have managed to enable authentication in haproxy. But the users and passwords ...
1
vote
1answer
101 views

Stunnel delaying boot

My stunnel implementation works fine when the network is plugged in but it takes an awful amount of time, which delays the whole boot process, when there is no network connected to the machine. As ...
2
votes
2answers
680 views

Should I use an ssl terminator or just haproxy?

I'm trying to figure out how to set up my architecture for a socket.io app that will require both https and wss connections. I've found many tutorials on the web suggesting that you use something like ...
0
votes
3answers
1k views

STunnel Not Reading Configuration File

I generated an SSL certificate as specified on the answer to stunnel: SSL-to-SSL? (for smtp/imap) And have the following configuation file: cert = /home/marshall/stunnels/certs/umistunnel.keys ; ...
0
votes
1answer
1k views

nginx: 502 bad gateway while using node.js varnish and stunnel

I've been following this tutorial, and everything seems to run OK, except for my nginx setup. My node.js application runs on port 1337, varnish runs on port 80, stunnel on 443 and nginx on 8080. I ...
1
vote
0answers
424 views

pfsense + haproxy + stunnel as reverse proxy with load balancing and ssl terminaltion

i have this topology as title says with a pfsense with installed haproxy and stunnel. Because i saw that haproxy can't do ssl termination i thought about stunnel. But i don't know how to set up it. My ...
0
votes
1answer
179 views

How to configure Stunnel to work with Internet explorer

My application works in the following way: The browsers are configured with a local proxy which is an instance of Stunnel running in Client mode that connects to a remote server to another instance of ...
0
votes
1answer
324 views

Configuring stunnel to work on port 5555

Am trying to integrate a payment gateway on a site, and the gateway provider requires that requires must secured with ssl, they also recommended the use of stunnel. I have installed stunnel and ...
3
votes
4answers
217 views

Is there an SSL equivelent to an ssh agent?

Here is my situation: There are a number of developers who all need to have access to be able to install ruby gems and python eggs from a remote source. Currently, we have a server inside our firewall ...
1
vote
1answer
1k views

stunnel version 4.53 says SSL server needs a certificate on Windows 7

I have been using stunnel previous versions just fine. It didn't apparently have the feature of a certificate in SSL server mode. That's alright but not necessary for us as we're simply running a ...
1
vote
3answers
1k views

Stunnel Connection Issue: 140943F2 SSL3_READ_BYTES:sslv3 alert unexpected message

Cant seem to connect using stunnel to the other party. Getting an error: SSL_connect: 140943F2: error:140943F2:SSL routines:SSL3_READ_BYTES:sslv3 alert unexpected message Any idea?
2
votes
0answers
600 views

Confused about stunnel's TIMEOUTclose setting

I understand from the stunnel documentation and from what I read on the Internet that MS has a buggy implementation of SSL; it fails to send a close_notify thing. The solution, says the documentation, ...
1
vote
1answer
445 views

SSL, Front-end caches, and web servers

I'm looking to add SSL to some sites. My current setup is varnish -> nginx -> python wsgi server. The varnish sits at the front and caches both static and dynamic content. The nginx server serves ...
3
votes
4answers
2k views

Pound + HAProxy or Stunnel + HAProxy

I'm looking at introducing a loadbalancer to my existing site infrastructure to help with traffic growth and provide a level of failure protection. The site I am running uses SSL certificates for the ...
0
votes
2answers
597 views

SSH over stunnel with secret public (client) ssl certificate

I am in a situation where I cannot have passwordless login for ssh and ssh server could not be run over any other port other than the default port. So, I have chosen to use stunnel to tunnel ssh. On ...
1
vote
1answer
435 views

Does stunnel support multiple forwardings over the same connection?

A lot of the tutorials on stunnel show only single forwardings. It stunnel limited to only fowarding and listening to one port on both ends, or can it handle both local and remote forwarding in the ...
0
votes
2answers
1k views

Stunnel Error binding pop3s to 0.0.0.0:110

I'm setting up stunnel so a non SSL enabled app can access a Gmail / Google Apps account. Here's the config I'm using: CLIENT=YES [pop3s] accept = 110 connect = pop.gmail.com:995 [imaps] accept = ...
3
votes
1answer
440 views

HAProxy and Stunnel PCI Compliance

I am setting up HAProxy to load balance between two web servers. Some of the pages on the site require SSL. Stunnel is handling the https connections and passing them off to haproxy (Stunnel ...
2
votes
2answers
122 views

Replace Cisco 2600 PTP T1

Our office and an outside location have a dedicated T1 point to point connected with Cisco2600's. We need to eliminate the need of the T1 circuit as it is costly and would like to route the traffic ...