Questions tagged [stunnel]

Stunnel is a small tool that can wrap the connection of other protocols with SSL/TLS.

Filter by
Sorted by
Tagged with
0 votes
0 answers
25 views

How to troubleshoot stunnel dropping repeatedly?

I don't know much about stunnel but we use it in many locations to connect from a Java app to a cloud database. We have one Windows computer where stunnel keeps dying. What might cause this? How can I ...
Chanel's user avatar
  • 11
0 votes
1 answer
131 views

Stunnel between two servers: should the ssl certificate be the same on both sides?

I have two Ubuntu servers with stunnel configured between them. Server A acts as a middleman server and forwards all inbound traffic to Server B (Openvpn server) through stunnel. Stunnel ...
PouJa's user avatar
  • 35
0 votes
0 answers
71 views

stunnel server dont connect to endpoint

my servers were doing fine until i changed the server with stunnel (as server) to another one this is my server.conf file setuid = root setgid = root [server] cert=/etc/stunnel/cert.pem key=/etc/...
IMIEEET's user avatar
  • 11
0 votes
0 answers
45 views

tcp syn is blocked, cant make a connection

so this is my current setup of openvpn+stunnel user>>internal-server-A(as stunnel client)>>main-out-of-country-server(running openvpn and stunnel as server) it worked fine in a restricted ...
IMIEEET's user avatar
  • 11
0 votes
2 answers
1k views

Stunnel Server On CentOS 7 - TLS options: 0x2100000 (+0x0, -0x0) Error

I am using CentOS Linux release v7.9.2009 (Core) with latest update. First of all i installed latest version of OpenSSL there. Here is the commands for that installation : cd ~ wget https://www....
helius.dev's user avatar
0 votes
1 answer
213 views

Stunnel + OpenVPN connected but no internet

I have setup stunnel on server pid = /var/run/stunnel4/stunnel.pid output = /var/log/stunnel4/stunnel.log setuid = root setgid = root [openvpn] cert=/etc/stunnel/cert.pem options = NO_SSLv2 options = ...
Steve Moretz's user avatar
1 vote
0 answers
25 views

how can i reroute incoming connection without passing it from my server

here is whats happening i ran a openvpn server on a server outside my coutry and tunneled it using stunnel from a server inside country(because of vpn restrictions i cant connect to it directly) but ...
IMIEEET's user avatar
  • 11
0 votes
1 answer
266 views

Is HAProxy in front of Stunnel with SNIs possible?

I have a working SSL Termination with STunnel in front of HAproxy. Recently, the matter of adding support for HTTP/2 was thrown my way. That is easy with HAProxy, but, as a constraint, STunnel must ...
Ai N.'s user avatar
  • 3
0 votes
1 answer
296 views

stunnel3 : [!] Inetd mode: TLS server needs a certificate [!] Configuration failed

I'm trying to configure and start stunnel3 but each time I get [!] Inetd mode: TLS server needs a certificate [!] Configuration failed stunnel.conf cert = /pathto/server.pem key = /pathto/server.key ...
John R's user avatar
  • 101
0 votes
0 answers
118 views

Stunnel outgoing packets strangely modified

I have a box with two nics setup as bridge. Ebtables redirects http traffic to iptables. The br0 ip address is 10.10.10.10. Stunnel is setup with transparent = source. It accepts connections on 127.1....
r0b0tron's user avatar
-1 votes
1 answer
140 views

What is SNI (with specific reference to Plivo)

Plivo have announced that they are depreciating their Legacy Messaging API for SNI. I've been unable to find any documentation on the topic (ideally with code samples) on their portal. I'm not been ...
chribonn's user avatar
  • 141
0 votes
1 answer
1k views

How to use Nginx HTTPS behind a SSLH and a STUNNEL

I have a NGINX listening on port 441 and SSLH listening to ports: 441(https), 442(ssh) and finally STUNNEL listening on port 443 forwarding to SSLH(port 2243). STUNNEL config: pid = /var/run/stunnel....
Pahan's user avatar
  • 3
1 vote
1 answer
1k views

stunnel + squid = 1 request for 5minutes (rest connection reset by peer)

tl;dr; Configuration with stunnel on client which connect to squid proxy with x509 certificate authentication work only for one request per 5minutes. Scenario: Squid and stunnel configured and ...
Mithrand1r's user avatar
1 vote
1 answer
480 views

Nginx reverse proxy failing with Stunnel and Mirth FHIR client

I have an application behind a Nginx reverse proxy that I am trying to access from an external client. Both the client and the application only support http. Therefore I am using Stunnel on the ...
skyman's user avatar
  • 156
1 vote
0 answers
115 views

IP Camera with PTZ through stunnel

Looking around at first it was suggest to use a reverse proxy to wrap https around and IP camera and then someone mentioned you don't get sound that way so they said use stunnel. I'm looking at ...
Reg's user avatar
  • 11
0 votes
1 answer
132 views

Stunnel for Service IPC over TCP?

I am working with an application that consists of Windows Services on the same server sending messages to each other over TCP. Each service is assigned a port on which it listens for messages. I ...
David Brower's user avatar
0 votes
1 answer
1k views

Route Tinyproxy outgoing connections through OpenVPN interface

I've created an Ubuntu 16.04 lxd container and setup Stunnel, Tinyproxy and OpenVPN client in it. The goal is to connect to Tinyproxy through Stunnel and force Tinyproxy to use OpenVPN's interface for ...
Mishgun_'s user avatar
  • 101
2 votes
1 answer
4k views

stunnel Unable to Locate Log File

I have built an alpine linux docker container on 3.11.6 w/ NGINX, Node.js, and stunnel When I go to load stunnel by calling stunnel inside of the running container I get that it cannot find the log ...
object Object's user avatar
1 vote
1 answer
2k views

HTTPS stunnel error:1408F09B:SSL routines:ssl3_get_record:https proxy request

I am configuring the HTTPS proxy with stunnel and squid. But, I received the Mozilla error page "Secure Connection Failed", in case I am making browser requests through port 44444(stunnel). ...
Awesome Man's user avatar
0 votes
4 answers
3k views

Postfix smtp relay can send emails but not relay other hosts

Use Case: We have several Eaton PDU/PSUs that don't support SSL/TLS authentication. I was tasked with building a SMTP relay server that can take the basic SMTP/25 emails and forward them to our email ...
Nathaniel Alconcel's user avatar
0 votes
1 answer
9k views

stunnel cant connect to server using TLSv1.2

I am trying to connect to a customer from my Centos7 server, the customer is running Stunnel server, and I am the client. I cannot establish a handshake and am getting the following err message in /...
perfecto25's user avatar
3 votes
1 answer
183 views

Is it necessary to use Stunnel while using Postfix with Amazon SES?

I have configured AWS SES with postfix to send emails. Is it necessary to use Stunnel while using Postfix 3.1.0 with AWS SES?
Basanta Sharma's user avatar
0 votes
0 answers
273 views

Error Web Service Stunnel

In Stunnel,I have this configuration: [ws] client = yes accept = 127.0.0.1:80 connect = webservice.it:443 I make a http request to 127.0.0.1:80 and I want that stunnel redirect to webservice.it:443. ...
stunnelws's user avatar
0 votes
1 answer
1k views

stunnel can only accept on port 80, possible iptables configuration

I am trying to get stunnel to forward from a port (eventually via https on 443) to port 8080. The http served on 8080 is already visible correctly by a remote browser. I have tried some 4 versions ...
Bernd Elkemann's user avatar
0 votes
1 answer
2k views

OpenVPN over stunnel not working when forwarded through router but working internally [closed]

I'm trying to set up OpenVPN over stunnel on my personal server. openvpn is in tcp and connects fine outside of stunnel, even when connecting through a port forward on the router. OpenVPN wrapped ...
mAndroid's user avatar
  • 103
3 votes
1 answer
3k views

Unable to create seemingly simple stunnel configuration

I have a computer at work that is behind a firewall with an internal ip address of 192.168.12.13... the firewall maps ports 40000 - 40019 to matching ports on this local machine. (e.g. 40000 - 40000, ...
Brian Rice's user avatar
3 votes
1 answer
4k views

ldapsearch doesn't work wih ldap.google.com via stunnel

Can't get it working. I have to use stunnel to be able integrate Jenkins with Google LDAP service. It works fine without stunnel $ LDAPTLS_CERT=/etc/stunnel/gldap.crt LDAPTLS_KEY=/etc/stunnel/gldap....
ALex_hha's user avatar
  • 7,193
0 votes
0 answers
159 views

SSH tunnel for serving web sites from localhost

This is more question... When I do like this... I am able to serve my site to external IP of my VPS... ssh -L 8080:localhost:80 [email protected] How secure and is it okay to serve websites ...
Vladimir Djukic's user avatar
1 vote
2 answers
2k views

How do I get a "valid SSL public certificate" from Windows Certificate ? (for stunnel configuration)

In these directions for configuring Stunnel on Windows the following text appears : Copy a valid SSL public certificate to the directory "C:\Program Files (x86)\stunnel." To make things more ...
glaucon's user avatar
  • 253
1 vote
2 answers
886 views

Can sslh differentiate between OpenVPN and HTTPS after they've been through STunnel?

Can sslh tell the difference between OpenVPN traffic and HTTPS traffic efter they have both been through STunnel? Like this: .---------. .------.HTTP/TCP.-------------. -->| stunnel |----&...
Benji Collins's user avatar
0 votes
1 answer
3k views

Install trusted Certificate on stunnel

I would like to be able to use a trusted certificate on Stunnel proxy, The default one does not seem to allow me to do this. Is there a way to do this please? Would need to be free.
radar's user avatar
  • 1
0 votes
1 answer
615 views

Configure SSL for openvpn on synology diskstation

I currently have a Synology DS218J and I have openvpn installed on it. I'm wondering how to configure SSL tunneling between the VPN server and the client. I did hear something about stunnel but I'm ...
Jason Liu's user avatar
4 votes
2 answers
13k views

stunnel: ssl3_get_record error when using TLS 1.2

I'm trying to use stunnel to be able to use HTTPS (port 443) on my localhost for a development web server running locally on port 8000. It starts and accepts connections, but every time I open https:/...
Teekin's user avatar
  • 181
1 vote
0 answers
286 views

stunnel dropping first packet

I'm looking to send GELF (Graylog Extended Log Format) log messages from a logstash instance to Graylog. But since the GELF output in logstash does not support TLS I want to use stunnel to encrypt the ...
Sprvn's user avatar
  • 11
0 votes
2 answers
3k views

Stunnel - SMTP Authentication failed

Hi ServerFault community, I have posted this to the stunnel-users mailing list on 30 April 2018 and again on 16 May 2018 at https://www.stunnel.org/pipermail/stunnel-users/2018-April/006000.html, ...
I Coetzee's user avatar
1 vote
1 answer
176 views

HAProxy-Apache encrypt connection

I have haproxy_server and apache_server in different datacenters, what is the best way to have encrypt connection between them? It’s working with the certbotand with the following configuration: ...
pata2004's user avatar
1 vote
0 answers
331 views

stunnel create systemd service files ?

I need to use stunnel to encrypt a service that by itself does not support any type of encryption. stunnel needs to run on the frontend and on the backend server. Because stunnel does not come with a ...
postFix's user avatar
  • 41
1 vote
0 answers
4k views

How to put Stunnel behind a Nginx reverse proxy to mask OpenVPN?

I have setup Nginx as a reverse proxy listening to the 443 port for several blogs. I'd like to have Nginx pass a specific sub-domain to Stunnel to have a less-detectable VPN as shown below. Is it ...
Maxithi's user avatar
  • 111
2 votes
1 answer
1k views

Will ssh tunnelling be a simpler way to solve my link encryption issue rather than stunnel?

We have an encryption issue from a vendors mid-tier to an Oracle database. We can use encrypted database connections and have done for 90% of cases. Our security team has advised us that since this ...
Hawkeye's user avatar
  • 2,699
0 votes
1 answer
402 views

Why does the AWS SES developer guide recommend using stunnel with Postfix?

I swear they changed this in the last year or two, but as of 2017-11-20, the SES developer guide for Postfix recommends setting up TLS via stunnel. This seems odd to me, considering that Postfix can ...
Mike Conigliaro's user avatar
1 vote
1 answer
6k views

stunnel - certificate verification

I have stunnel to provide SSL for Redis. I have the following configuration: [redis] CAfile= /etc/stunnel/ca.crt accept = 636 cert = /etc/stunnel/server1.crt connect = localhost:6379 key = /etc/...
Rahul's user avatar
  • 119
0 votes
1 answer
363 views

Email From Linux Using Stunnel

I'm trying to send an email from a linux instance using stunnel and AWS SES as outlined here. I've been through the above documention and and I seem to be getting a connection to my server that has ...
never_odd_or_even's user avatar
0 votes
1 answer
941 views

Can't connect over https with stunnel - troubleshooting

I have stunnel forwarding from HTTP on port 8040 to HTTPS on port 8091. My stunnel.conf file: [henhouse] accept = 8091 connect = 127.0.0.1:8041 cert = /etc/stunnel/stunnel.pem How I generated said ...
hubatish's user avatar
  • 109
1 vote
1 answer
736 views

Stunnel agent emitting file not found error

I have an Stunnel 4.29 on Red Hat Linux 6.8 that will not start and emits a 'No such file or directory' error: # /usr/bin/stunnel /etc/stunnel/agent/dynatrace-agent.conf 2017.05.03 19:04:26 LOG7[...
Alex Harvey's user avatar
1 vote
0 answers
88 views

Hosting SSL tunneled OpenVPN and HTTPS on the same server at the same 443 port [duplicate]

Is there a way to host a SSL-tunneled (using stunnel) OpenVPN server and a regular Apache HTTPS server on the same server using HAProxy? It seems that by using stunnel, the format of the packets ...
Nguyen H Chan's user avatar
0 votes
1 answer
465 views

Restart stunnel4 quietly with no output

How can I restart stunnel4 and suppress output unless there is an error? I tried using the -quiet flag, but according to the manpage that is NT/2000/XP only $ /etc/init.d/stunnel4 restart -quiet /...
andrewtweber's user avatar
1 vote
0 answers
2k views

Stunnel on ubuntu fails to listen on the port

I have installed stunnel4 on my 16.04 ubuntu and I have not been able to get any result out of the specific ports I have set it on via netstat -tulnp | grep 4444 here is my service status : ...
Hypothesis's user avatar
0 votes
0 answers
1k views

Round robin & load balance to local port range using iptables on RedHat Linux

I wanted to implement load balancer (round robin) using 4 instances of ssh reverse tunnels running localhost:11669, localhost:11670, localhost:11671 & localhost:11672 connecting to remote host ...
Raj's user avatar
  • 1
0 votes
1 answer
9k views

CentOS with SELinux, systemd and stunnel

I am using CentOS 7.3 with stunnel. If I launch stunnel like that : stunnel /etc/stunnel/stunnel.conf Everything works fine ! I would like to manage stunnel with systemd. Here is my stunnel.service ...
Djé Djé's user avatar
3 votes
1 answer
4k views

Server closed connection error when checking if key exists in a redis cluster using stunnel

Using redis-cli command line utility with the -c switch to connect to a redis cluster with stunnel configured and running. When I execute the EXISTS command to verify a key, as expected, it redirects ...
Ray's user avatar
  • 720