Questions tagged [stunnel]

Stunnel is a small tool that can wrap the connection of other protocols with SSL/TLS.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

DNSoverTLS for upstream recursion requests in Bind9/Stunnel

There is a lot of information out there about DNSoverTLS and different combinations of setups, and I've slowly been going through different combinations to get the right setup for us, but it's led to ...
0
votes
4answers
192 views

Postfix smtp relay can send emails but not relay other hosts

Use Case: We have several Eaton PDU/PSUs that don't support SSL/TLS authentication. I was tasked with building a SMTP relay server that can take the basic SMTP/25 emails and forward them to our email ...
0
votes
0answers
281 views

Send SOCKS proxy credentials over SSL/TLS

OpenVPN client config file has a socks-proxy rule which allows connecting to a SOCKS proxy before connecting to a VPN. I installed Dante SOCKS proxy but it looks like it does not support SSL/TLS so ...
0
votes
1answer
113 views

stunnel cant connect to server using TLSv1.2

I am trying to connect to a customer from my Centos7 server, the customer is running Stunnel server, and I am the client. I cannot establish a handshake and am getting the following err message in /...
3
votes
1answer
42 views

Is it necessary to use Stunnel while using Postfix with Amazon SES?

I have configured AWS SES with postfix to send emails. Is it necessary to use Stunnel while using Postfix 3.1.0 with AWS SES?
0
votes
0answers
49 views

Error Web Service Stunnel

In Stunnel,I have this configuration: [ws] client = yes accept = 127.0.0.1:80 connect = webservice.it:443 I make a http request to 127.0.0.1:80 and I want that stunnel redirect to webservice.it:443. ...
0
votes
0answers
34 views

stunnel universal rule for HTTP to HTTPS

I successfully configured stunnel on LAN 192.168.1.3 machine for client's requests forwarding to POP3s and SMTPs like: [pop3s-995] client = yes accept = 192.168.1.2:10995 connect = pop.example.com:...
0
votes
0answers
140 views

x11vnc stunnel: sslv3 alert bad certificate

I am trying to connect to a running x11vnc server with SSL enabled. I am using stunnel to handle the encryption. This is how I start the server: $ x11vnc -stunnel "TMP" -xkb -noxrecord -noxfixes -...
0
votes
1answer
177 views

stunnel can only accept on port 80, possible iptables configuration

I am trying to get stunnel to forward from a port (eventually via https on 443) to port 8080. The http served on 8080 is already visible correctly by a remote browser. I have tried some 4 versions ...
0
votes
1answer
704 views

OpenVPN over stunnel not working when forwarded through router but working internally [closed]

I'm trying to set up OpenVPN over stunnel on my personal server. openvpn is in tcp and connects fine outside of stunnel, even when connecting through a port forward on the router. OpenVPN wrapped ...
1
vote
1answer
561 views

Unable to create seemingly simple stunnel configuration

I have a computer at work that is behind a firewall with an internal ip address of 192.168.12.13... the firewall maps ports 40000 - 40019 to matching ports on this local machine. (e.g. 40000 - 40000, ...
1
vote
1answer
1k views

ldapsearch doesn't work wih ldap.google.com via stunnel

Can't get it working. I have to use stunnel to be able integrate Jenkins with Google LDAP service. It works fine without stunnel $ LDAPTLS_CERT=/etc/stunnel/gldap.crt LDAPTLS_KEY=/etc/stunnel/gldap....
0
votes
0answers
72 views

SSH tunnel for serving web sites from localhost

This is more question... When I do like this... I am able to serve my site to external IP of my VPS... ssh -L 8080:localhost:80 username@server.com How secure and is it okay to serve websites ...
0
votes
2answers
685 views

How do I get a “valid SSL public certificate” from Windows Certificate ? (for stunnel configuration)

In these directions for configuring Stunnel on Windows the following text appears : Copy a valid SSL public certificate to the directory "C:\Program Files (x86)\stunnel." To make things more ...
1
vote
2answers
579 views

Can sslh differentiate between OpenVPN and HTTPS after they've been through STunnel?

Can sslh tell the difference between OpenVPN traffic and HTTPS traffic efter they have both been through STunnel? Like this: .---------. .------.HTTP/TCP.-------------. -->| stunnel |----&...
0
votes
1answer
1k views

Install trusted Certificate on stunnel

I would like to be able to use a trusted certificate on Stunnel proxy, The default one does not seem to allow me to do this. Is there a way to do this please? Would need to be free.
0
votes
1answer
413 views

Configure SSL for openvpn on synology diskstation

I currently have a Synology DS218J and I have openvpn installed on it. I'm wondering how to configure SSL tunneling between the VPN server and the client. I did hear something about stunnel but I'm ...
3
votes
2answers
4k views

stunnel: ssl3_get_record error when using TLS 1.2

I'm trying to use stunnel to be able to use HTTPS (port 443) on my localhost for a development web server running locally on port 8000. It starts and accepts connections, but every time I open https:/...
1
vote
0answers
151 views

stunnel dropping first packet

I'm looking to send GELF (Graylog Extended Log Format) log messages from a logstash instance to Graylog. But since the GELF output in logstash does not support TLS I want to use stunnel to encrypt the ...
0
votes
2answers
909 views

Stunnel - SMTP Authentication failed

Hi ServerFault community, I have posted this to the stunnel-users mailing list on 30 April 2018 and again on 16 May 2018 at https://www.stunnel.org/pipermail/stunnel-users/2018-April/006000.html, ...
1
vote
1answer
156 views

HAProxy-Apache encrypt connection

I have haproxy_server and apache_server in different datacenters, what is the best way to have encrypt connection between them? It’s working with the certbotand with the following configuration: ...
1
vote
0answers
231 views

stunnel create systemd service files ?

I need to use stunnel to encrypt a service that by itself does not support any type of encryption. stunnel needs to run on the frontend and on the backend server. Because stunnel does not come with a ...
1
vote
0answers
2k views

How to put Stunnel behind a Nginx reverse proxy to mask OpenVPN?

I have setup Nginx as a reverse proxy listening to the 443 port for several blogs. I'd like to have Nginx pass a specific sub-domain to Stunnel to have a less-detectable VPN as shown below. Is it ...
2
votes
1answer
674 views

Will ssh tunnelling be a simpler way to solve my link encryption issue rather than stunnel?

We have an encryption issue from a vendors mid-tier to an Oracle database. We can use encrypted database connections and have done for 90% of cases. Our security team has advised us that since this ...
0
votes
1answer
215 views

Why does the AWS SES developer guide recommend using stunnel with Postfix?

I swear they changed this in the last year or two, but as of 2017-11-20, the SES developer guide for Postfix recommends setting up TLS via stunnel. This seems odd to me, considering that Postfix can ...
1
vote
1answer
3k views

stunnel - certificate verification

I have stunnel to provide SSL for Redis. I have the following configuration: [redis] CAfile= /etc/stunnel/ca.crt accept = 636 cert = /etc/stunnel/server1.crt connect = localhost:6379 key = /etc/...
0
votes
1answer
265 views

Email From Linux Using Stunnel

I'm trying to send an email from a linux instance using stunnel and AWS SES as outlined here. I've been through the above documention and and I seem to be getting a connection to my server that has ...
0
votes
1answer
467 views

Can't connect over https with stunnel - troubleshooting

I have stunnel forwarding from HTTP on port 8040 to HTTPS on port 8091. My stunnel.conf file: [henhouse] accept = 8091 connect = 127.0.0.1:8041 cert = /etc/stunnel/stunnel.pem How I generated said ...
1
vote
1answer
303 views

Stunnel agent emitting file not found error

I have an Stunnel 4.29 on Red Hat Linux 6.8 that will not start and emits a 'No such file or directory' error: # /usr/bin/stunnel /etc/stunnel/agent/dynatrace-agent.conf 2017.05.03 19:04:26 LOG7[...
1
vote
0answers
69 views

Hosting SSL tunneled OpenVPN and HTTPS on the same server at the same 443 port [duplicate]

Is there a way to host a SSL-tunneled (using stunnel) OpenVPN server and a regular Apache HTTPS server on the same server using HAProxy? It seems that by using stunnel, the format of the packets ...
0
votes
1answer
243 views

Restart stunnel4 quietly with no output

How can I restart stunnel4 and suppress output unless there is an error? I tried using the -quiet flag, but according to the manpage that is NT/2000/XP only $ /etc/init.d/stunnel4 restart -quiet /...
1
vote
0answers
1k views

Stunnel on ubuntu fails to listen on the port

I have installed stunnel4 on my 16.04 ubuntu and I have not been able to get any result out of the specific ports I have set it on via netstat -tulnp | grep 4444 here is my service status : ...
0
votes
0answers
785 views

Round robin & load balance to local port range using iptables on RedHat Linux

I wanted to implement load balancer (round robin) using 4 instances of ssh reverse tunnels running localhost:11669, localhost:11670, localhost:11671 & localhost:11672 connecting to remote host ...
0
votes
1answer
5k views

CentOS with SELinux, systemd and stunnel

I am using CentOS 7.3 with stunnel. If I launch stunnel like that : stunnel /etc/stunnel/stunnel.conf Everything works fine ! I would like to manage stunnel with systemd. Here is my stunnel.service ...
2
votes
1answer
3k views

Server closed connection error when checking if key exists in a redis cluster using stunnel

Using redis-cli command line utility with the -c switch to connect to a redis cluster with stunnel configured and running. When I execute the EXISTS command to verify a key, as expected, it redirects ...
1
vote
0answers
591 views

Stunnel with SNI: Section *name*: SNI section name not found

Im trying to use stunnel with 2 domains on the same IP. My conf is this: ;key = /etc/ssl/private/namecheap/server.key # See this link http://www.sysadminworld.com/2011/how-do-i-use-an-intermediate-...
0
votes
0answers
502 views

Stunnel broke packets

I'm trying to set up a secure connection between a computer and another. I'm my case, SSH doesn't seem a good solution, and VPN is worst in our case too. To begin, I've test my configuration in ...
1
vote
1answer
842 views

Redis Cluster over stunnel configuration

I'm trying to set up a 3 node Redis Cluster that communicates over stunnel. Redis listens on port 6379 (configurable) for client pub/sub and on the configured port+10000 (not configurable - it ...
2
votes
1answer
6k views

stunnel won't verify client certificate as expected

I'm trying to set up stunnel to provide a TLS wrapper to an HTTP service that doesn't natively support TLS. I have this working well without using TLS client certificates. When adding the client ...
2
votes
1answer
2k views

Stunnel “wrong version number” error with TLS-PSK

I've got Stunnel running on a Raspberry Pi which is acting as a TLS wrapper for an apache2 server. I've configured it to use TLS-PSK (correctly, I think), but the logs show the following when I try to ...
3
votes
0answers
704 views

stunnel TIMEOUTconnect on Ubuntu 15.10

We use stunnel extensively for LDAP proxying. We recently set up a Ubuntu 15.10 server to migrate some of the tunnels to and are unable to get it to work. We've scraped through the logs, configs, ...
2
votes
1answer
4k views

Stunnel TLS authentication with multiple Authorities

I am trying to secure a rethinkdb cluster behind stunnel. The service needs to support multiple Certificate Authorities (CA). Currently I concat the accepted CAs into one file (/certs/ca.pem) but it ...
2
votes
0answers
767 views

iptables configuations for stunnel+squid

I'm building a highly anonymous proxy server with squid and stunnel, and I'm facing a configurations problem on iptables. The server should act like this: browser <-> client stunnel <=> ...
1
vote
0answers
329 views

stunnel does not handle SNI correctly

I am trying to get stunnel-4.53-1.1 in Debian Wheezy running. The important parts of my configuration (/etc/stunnel/stunnel.conf) look like that: [https] cert = /etc/ssl/certs/mydomain.pem key = /etc/...
2
votes
3answers
2k views

Stunnel: ssl to ssl

I have a little service which listen only on https://localhost:41952 and checks source hostname (it must be localhost). I want to connect on "listen:1988" and redirect requests with stunnel to "...
4
votes
0answers
3k views

HTTP to HTTPS local proxy that can do the HTTPS connection over a proxy

Here's the deal: Our client software can only connect using http protocol, it can not do https. However, security requirements dictate end-to-end security, so we need to use https when talking to the ...
2
votes
1answer
8k views

How to log/see the traffic going through stunnel before/after encryption?

So I am using stunnel to talk to a SSL server. I would like to see the messages I am sending before they get encrypted and more importantly the messages I am receiving after they get decrypted. I ...
5
votes
1answer
1k views

How does stunnel redirect traffic?

I am familiar with the stunnel.conf and I know how to specify which unencrypted ports it listens to and to which encrypted ports it redirects, but I would like to understand how it gets the power to "...
3
votes
0answers
188 views

Why is the loopback device needed on a client side of Stunnel?

This SANS Institute guide states that "On the client side, a port listening on the loopback interface of the local system would send/receive data on the clear-text protocol and tunnel out on ...
0
votes
3answers
623 views

Did I install stunnel correctly?

Running Ubuntu 14.04 64-bit. apt-get install build-essential -y apt-get install libssl-dev -y apt-get install wget -y cd srv wget https://www.stunnel.org/downloads/stunnel-5.23.tar.gz tar -xzf ...