Questions tagged [stunnel]

Stunnel is a small tool that can wrap the connection of other protocols with SSL/TLS.

Filter by
Sorted by
Tagged with
0 votes
1 answer
43 views

Is HAProxy in front of Stunnel with SNIs possible?

I have a working SSL Termination with STunnel in front of HAproxy. Recently, the matter of adding support for HTTP/2 was thrown my way. That is easy with HAProxy, but, as a constraint, STunnel must ...
user avatar
  • 3
0 votes
1 answer
43 views

stunnel3 : [!] Inetd mode: TLS server needs a certificate [!] Configuration failed

I'm trying to configure and start stunnel3 but each time I get [!] Inetd mode: TLS server needs a certificate [!] Configuration failed stunnel.conf cert = /pathto/server.pem key = /pathto/server.key ...
user avatar
  • 101
0 votes
0 answers
76 views

stunnel client accepts any peer certificate

I have a Linux machine that is connecting to a remote MySQL server using stunnel 5.56. I downloaded the remote server's certificate and put it in /etc/ssl/cert/mysql-server.pem. Here is my Linux ...
user avatar
  • 2,581
0 votes
0 answers
5 views

How to change service “access point “?

I have a service running on a certain network server. In order to interface with that service, all the other network nodes contact the server on a particular open port (the service is listening on it)....
user avatar
0 votes
0 answers
65 views

Stunnel outgoing packets strangely modified

I have a box with two nics setup as bridge. Ebtables redirects http traffic to iptables. The br0 ip address is 10.10.10.10. Stunnel is setup with transparent = source. It accepts connections on 127.1....
user avatar
0 votes
0 answers
204 views

Unable to connect to stunnelled RTSP stream using VLC mediaplayer

This problem has been plaguing me for quite a while. I've setup Stunnel (v5.59) on my Windows10 desktop. Certificates were generated with Certbot (beta1.15.0) for my internal network. Stunnel ...
user avatar
-1 votes
1 answer
83 views

What is SNI (with specific reference to Plivo)

Plivo have announced that they are depreciating their Legacy Messaging API for SNI. I've been unable to find any documentation on the topic (ideally with code samples) on their portal. I'm not been ...
user avatar
  • 141
0 votes
1 answer
383 views

How to use Nginx HTTPS behind a SSLH and a STUNNEL

I have a NGINX listening on port 441 and SSLH listening to ports: 441(https), 442(ssh) and finally STUNNEL listening on port 443 forwarding to SSLH(port 2243). STUNNEL config: pid = /var/run/stunnel....
user avatar
  • 1
1 vote
1 answer
529 views

stunnel + squid = 1 request for 5minutes (rest connection reset by peer)

tl;dr; Configuration with stunnel on client which connect to squid proxy with x509 certificate authentication work only for one request per 5minutes. Scenario: Squid and stunnel configured and ...
user avatar
1 vote
1 answer
241 views

Nginx reverse proxy failing with Stunnel and Mirth FHIR client

I have an application behind a Nginx reverse proxy that I am trying to access from an external client. Both the client and the application only support http. Therefore I am using Stunnel on the ...
user avatar
  • 156
1 vote
0 answers
50 views

IP Camera with PTZ through stunnel

Looking around at first it was suggest to use a reverse proxy to wrap https around and IP camera and then someone mentioned you don't get sound that way so they said use stunnel. I'm looking at ...
user avatar
  • 11
0 votes
1 answer
83 views

Stunnel for Service IPC over TCP?

I am working with an application that consists of Windows Services on the same server sending messages to each other over TCP. Each service is assigned a port on which it listens for messages. I ...
user avatar
0 votes
1 answer
662 views

Route Tinyproxy outgoing connections through OpenVPN interface

I've created an Ubuntu 16.04 lxd container and setup Stunnel, Tinyproxy and OpenVPN client in it. The goal is to connect to Tinyproxy through Stunnel and force Tinyproxy to use OpenVPN's interface for ...
user avatar
  • 101
2 votes
1 answer
2k views

stunnel Unable to Locate Log File

I have built an alpine linux docker container on 3.11.6 w/ NGINX, Node.js, and stunnel When I go to load stunnel by calling stunnel inside of the running container I get that it cannot find the log ...
user avatar
1 vote
1 answer
994 views

HTTPS stunnel error:1408F09B:SSL routines:ssl3_get_record:https proxy request

I am configuring the HTTPS proxy with stunnel and squid. But, I received the Mozilla error page "Secure Connection Failed", in case I am making browser requests through port 44444(stunnel). ...
user avatar
0 votes
4 answers
2k views

Postfix smtp relay can send emails but not relay other hosts

Use Case: We have several Eaton PDU/PSUs that don't support SSL/TLS authentication. I was tasked with building a SMTP relay server that can take the basic SMTP/25 emails and forward them to our email ...
user avatar
0 votes
0 answers
2k views

Send SOCKS proxy credentials over SSL/TLS

OpenVPN client config file has a socks-proxy rule which allows connecting to a SOCKS proxy before connecting to a VPN. I installed Dante SOCKS proxy but it looks like it does not support SSL/TLS so ...
user avatar
  • 103
0 votes
1 answer
5k views

stunnel cant connect to server using TLSv1.2

I am trying to connect to a customer from my Centos7 server, the customer is running Stunnel server, and I am the client. I cannot establish a handshake and am getting the following err message in /...
user avatar
3 votes
1 answer
103 views

Is it necessary to use Stunnel while using Postfix with Amazon SES?

I have configured AWS SES with postfix to send emails. Is it necessary to use Stunnel while using Postfix 3.1.0 with AWS SES?
user avatar
0 votes
0 answers
202 views

Error Web Service Stunnel

In Stunnel,I have this configuration: [ws] client = yes accept = 127.0.0.1:80 connect = webservice.it:443 I make a http request to 127.0.0.1:80 and I want that stunnel redirect to webservice.it:443. ...
user avatar
0 votes
1 answer
694 views

stunnel can only accept on port 80, possible iptables configuration

I am trying to get stunnel to forward from a port (eventually via https on 443) to port 8080. The http served on 8080 is already visible correctly by a remote browser. I have tried some 4 versions ...
user avatar
0 votes
1 answer
1k views

OpenVPN over stunnel not working when forwarded through router but working internally [closed]

I'm trying to set up OpenVPN over stunnel on my personal server. openvpn is in tcp and connects fine outside of stunnel, even when connecting through a port forward on the router. OpenVPN wrapped ...
user avatar
  • 103
2 votes
1 answer
2k views

Unable to create seemingly simple stunnel configuration

I have a computer at work that is behind a firewall with an internal ip address of 192.168.12.13... the firewall maps ports 40000 - 40019 to matching ports on this local machine. (e.g. 40000 - 40000, ...
user avatar
2 votes
1 answer
3k views

ldapsearch doesn't work wih ldap.google.com via stunnel

Can't get it working. I have to use stunnel to be able integrate Jenkins with Google LDAP service. It works fine without stunnel $ LDAPTLS_CERT=/etc/stunnel/gldap.crt LDAPTLS_KEY=/etc/stunnel/gldap....
user avatar
  • 6,985
0 votes
0 answers
87 views

SSH tunnel for serving web sites from localhost

This is more question... When I do like this... I am able to serve my site to external IP of my VPS... ssh -L 8080:localhost:80 username@server.com How secure and is it okay to serve websites ...
user avatar
0 votes
2 answers
1k views

How do I get a "valid SSL public certificate" from Windows Certificate ? (for stunnel configuration)

In these directions for configuring Stunnel on Windows the following text appears : Copy a valid SSL public certificate to the directory "C:\Program Files (x86)\stunnel." To make things more ...
user avatar
  • 243
1 vote
2 answers
776 views

Can sslh differentiate between OpenVPN and HTTPS after they've been through STunnel?

Can sslh tell the difference between OpenVPN traffic and HTTPS traffic efter they have both been through STunnel? Like this: .---------. .------.HTTP/TCP.-------------. -->| stunnel |----&...
user avatar
0 votes
1 answer
2k views

Install trusted Certificate on stunnel

I would like to be able to use a trusted certificate on Stunnel proxy, The default one does not seem to allow me to do this. Is there a way to do this please? Would need to be free.
user avatar
  • 1
0 votes
1 answer
508 views

Configure SSL for openvpn on synology diskstation

I currently have a Synology DS218J and I have openvpn installed on it. I'm wondering how to configure SSL tunneling between the VPN server and the client. I did hear something about stunnel but I'm ...
user avatar
4 votes
2 answers
9k views

stunnel: ssl3_get_record error when using TLS 1.2

I'm trying to use stunnel to be able to use HTTPS (port 443) on my localhost for a development web server running locally on port 8000. It starts and accepts connections, but every time I open https:/...
user avatar
  • 181
1 vote
0 answers
239 views

stunnel dropping first packet

I'm looking to send GELF (Graylog Extended Log Format) log messages from a logstash instance to Graylog. But since the GELF output in logstash does not support TLS I want to use stunnel to encrypt the ...
user avatar
  • 11
0 votes
2 answers
2k views

Stunnel - SMTP Authentication failed

Hi ServerFault community, I have posted this to the stunnel-users mailing list on 30 April 2018 and again on 16 May 2018 at https://www.stunnel.org/pipermail/stunnel-users/2018-April/006000.html, ...
user avatar
1 vote
1 answer
168 views

HAProxy-Apache encrypt connection

I have haproxy_server and apache_server in different datacenters, what is the best way to have encrypt connection between them? It’s working with the certbotand with the following configuration: ...
user avatar
1 vote
0 answers
283 views

stunnel create systemd service files ?

I need to use stunnel to encrypt a service that by itself does not support any type of encryption. stunnel needs to run on the frontend and on the backend server. Because stunnel does not come with a ...
user avatar
  • 41
1 vote
0 answers
4k views

How to put Stunnel behind a Nginx reverse proxy to mask OpenVPN?

I have setup Nginx as a reverse proxy listening to the 443 port for several blogs. I'd like to have Nginx pass a specific sub-domain to Stunnel to have a less-detectable VPN as shown below. Is it ...
user avatar
  • 111
2 votes
1 answer
991 views

Will ssh tunnelling be a simpler way to solve my link encryption issue rather than stunnel?

We have an encryption issue from a vendors mid-tier to an Oracle database. We can use encrypted database connections and have done for 90% of cases. Our security team has advised us that since this ...
user avatar
  • 2,659
0 votes
1 answer
343 views

Why does the AWS SES developer guide recommend using stunnel with Postfix?

I swear they changed this in the last year or two, but as of 2017-11-20, the SES developer guide for Postfix recommends setting up TLS via stunnel. This seems odd to me, considering that Postfix can ...
user avatar
1 vote
1 answer
5k views

stunnel - certificate verification

I have stunnel to provide SSL for Redis. I have the following configuration: [redis] CAfile= /etc/stunnel/ca.crt accept = 636 cert = /etc/stunnel/server1.crt connect = localhost:6379 key = /etc/...
user avatar
  • 119
0 votes
1 answer
313 views

Email From Linux Using Stunnel

I'm trying to send an email from a linux instance using stunnel and AWS SES as outlined here. I've been through the above documention and and I seem to be getting a connection to my server that has ...
user avatar
0 votes
1 answer
710 views

Can't connect over https with stunnel - troubleshooting

I have stunnel forwarding from HTTP on port 8040 to HTTPS on port 8091. My stunnel.conf file: [henhouse] accept = 8091 connect = 127.0.0.1:8041 cert = /etc/stunnel/stunnel.pem How I generated said ...
user avatar
  • 109
1 vote
1 answer
582 views

Stunnel agent emitting file not found error

I have an Stunnel 4.29 on Red Hat Linux 6.8 that will not start and emits a 'No such file or directory' error: # /usr/bin/stunnel /etc/stunnel/agent/dynatrace-agent.conf 2017.05.03 19:04:26 LOG7[...
user avatar
1 vote
0 answers
87 views

Hosting SSL tunneled OpenVPN and HTTPS on the same server at the same 443 port [duplicate]

Is there a way to host a SSL-tunneled (using stunnel) OpenVPN server and a regular Apache HTTPS server on the same server using HAProxy? It seems that by using stunnel, the format of the packets ...
user avatar
0 votes
1 answer
401 views

Restart stunnel4 quietly with no output

How can I restart stunnel4 and suppress output unless there is an error? I tried using the -quiet flag, but according to the manpage that is NT/2000/XP only $ /etc/init.d/stunnel4 restart -quiet /...
user avatar
1 vote
0 answers
2k views

Stunnel on ubuntu fails to listen on the port

I have installed stunnel4 on my 16.04 ubuntu and I have not been able to get any result out of the specific ports I have set it on via netstat -tulnp | grep 4444 here is my service status : ...
user avatar
0 votes
0 answers
1k views

Round robin & load balance to local port range using iptables on RedHat Linux

I wanted to implement load balancer (round robin) using 4 instances of ssh reverse tunnels running localhost:11669, localhost:11670, localhost:11671 & localhost:11672 connecting to remote host ...
user avatar
  • 1
0 votes
1 answer
8k views

CentOS with SELinux, systemd and stunnel

I am using CentOS 7.3 with stunnel. If I launch stunnel like that : stunnel /etc/stunnel/stunnel.conf Everything works fine ! I would like to manage stunnel with systemd. Here is my stunnel.service ...
user avatar
3 votes
1 answer
4k views

Server closed connection error when checking if key exists in a redis cluster using stunnel

Using redis-cli command line utility with the -c switch to connect to a redis cluster with stunnel configured and running. When I execute the EXISTS command to verify a key, as expected, it redirects ...
user avatar
  • 670
3 votes
1 answer
2k views

Stunnel with SNI: Section *name*: SNI section name not found

Im trying to use stunnel with 2 domains on the same IP. My conf is this: ;key = /etc/ssl/private/namecheap/server.key # See this link http://www.sysadminworld.com/2011/how-do-i-use-an-intermediate-...
user avatar
  • 131
0 votes
0 answers
652 views

Stunnel broke packets

I'm trying to set up a secure connection between a computer and another. I'm my case, SSH doesn't seem a good solution, and VPN is worst in our case too. To begin, I've test my configuration in ...
user avatar
  • 131
2 votes
1 answer
1k views

Redis Cluster over stunnel configuration

I'm trying to set up a 3 node Redis Cluster that communicates over stunnel. Redis listens on port 6379 (configurable) for client pub/sub and on the configured port+10000 (not configurable - it ...
user avatar