rejetto forum

Software => HFS ~ HTTP File Server => Topic started by: finchy70 on October 02, 2016, 08:06:07 PM

Title: Set Up HFS ssl on windows 10
Post by: finchy70 on October 02, 2016, 08:06:07 PM

Can someone please point me in the right direction to set up HFS ssl with a cert provided by NameCheap.
I did it a few years ago but can't remember how and cant find a tutorial.

Any help would be gratefully received.

Thanks Finchy70

Title: Re: Set Up HFS ssl on windows 10
Post by: bmartino1 on October 02, 2016, 09:02:22 PM

wiki:
http://www.rejetto.com/wiki/index.php?title=HFS:_Secure_your_server

Other help:
http://www.rejetto.com/forum/hfs-~-http-file-server/stunnel-and-hfs-(securing-your-hfs)/

in regards to the ca, just put you file from them and point the directory the file is in stunnel...

Title: Re: Set Up HFS ssl on windows 10
Post by: finchy70 on October 03, 2016, 10:52:12 AM

I have created a private key and cert request using
openssl req -new -days 365 -nodes -config stunnel.pem -out certreq.pem -keyout stunnel.pem

I then send the request to my ssl cert provider and get back two files a cert.p7b and cert.ca-bundle
I placed the stunnel.pem in the SSLCerts folder and renamed it Private key.pem and have tried both p7b and bundle files in the folder renamed as Certificate.pem.

When I run HFS it errors saying  invalid config file.

If I replace the self generated keys in the sslcerts folder it all works.  Any idea why this isn't working?

Title: Re: Set Up HFS ssl on windows 10
Post by: bmartino1 on October 03, 2016, 11:27:41 AM

none, with the generated keys, i would assume, it would be something in the stunnel config. somehow you have to tell stunnel to use that key.

https://www.stunnel.org/pipermail/stunnel-users/2011-December/003457.html

https://www.stunnel.org/faq.html

Title: Re: Set Up HFS ssl on windows 10
Post by: finchy70 on October 03, 2016, 01:22:45 PM

FIXED.
In the end i decided to use the latest standalone stunnel and the latest hfs.
Created my key with openssl in stunnel package and put the private key and cert from my provider in stunnel.pem and it now works.
Set stunnel to listen on 443 and then send to 44300.  I set HFS to listen on 44300.

Thanks for the help.