rejetto forum

HTTPS support (stunnel?)

0 Members and 1 Guest are viewing this topic.

Offline uvbeenzaned

  • Occasional poster
  • *
    • Posts: 38
    • View Profile
Hi,

I need ssl support and need to know how to set up stunnel!
I have installed and I need to know what the config is supposed to be set to in stunnel.conf.
Never used https in hfs.
The only time I use it is when I am using apache and mysql, php and all of the huge websever stuff.
Antec 900 Gaming Case, Nvidia XFX 780i 3 Way SLI Motherboard, 6 GB RAM, EVGA-Nvidia GeForce 9800 GTX + and Nvidia GeForce 8600 GT using 2 Way SLI, Pentium Dual Core Processor, Core Speed=2.6 MHz, 3 Monitors, 1150 GBs of hd storage, Win7=YEAH!


Offline uvbeenzaned

  • Occasional poster
  • *
    • Posts: 38
    • View Profile
Well thanks then.

I looked at some other posts and tried it the way they did it but it didn't work!

This is what I had by the way:
;[https]
;accept  = 443
;connect = 80
;TIMEOUTclose

It's not working every time I connect to my server.

Sorry if I am being annoying about this. :-[
Antec 900 Gaming Case, Nvidia XFX 780i 3 Way SLI Motherboard, 6 GB RAM, EVGA-Nvidia GeForce 9800 GTX + and Nvidia GeForce 8600 GT using 2 Way SLI, Pentium Dual Core Processor, Core Speed=2.6 MHz, 3 Monitors, 1150 GBs of hd storage, Win7=YEAH!


Offline Mars

  • Operator
  • Tireless poster
  • *****
    • Posts: 2056
    • View Profile
; Sample stunnel configuration file by Michal Trojnara 2002-2006
; Some options used here may not be adequate for your particular configuration

; Certificate/key is needed in server mode and optional in client mode
; The default certificate is provided only for testing and should not
; be used in a production environment
cert = cert.pem
key  = key.pem

; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

; Workaround for Eudora bug
;options = DONT_INSERT_EMPTY_FRAGMENTS

; Authentication stuff
;verify = 2
; Don't forget to c_rehash CApath
;CApath = certs
; It's often easier to use CAfile
;CAfile = certs.pem
; Don't forget to c_rehash CRLpath
;CRLpath = crls
; Alternatively you can use CRLfile
;CRLfile = crls.pem

; Some debugging stuff useful for troubleshooting
debug = 7

;output = stunnel.log

; Use it for client mode
;client = yes

; Service-level configuration

;[pop3s]
;accept  = 995
;connect = 110

;[imaps]
;accept  = 993
;connect = 143

;[ssmtp]
;accept  = 465
;connect = 25

[https]
accept  = 0.0.0.0:443
connect = 127.0.0.1:80
local = 127.0.0.1
TIMEOUTclose = 0
« Last Edit: January 22, 2010, 03:05:56 PM by Mars »


Offline uvbeenzaned

  • Occasional poster
  • *
    • Posts: 38
    • View Profile
Get this every time!

 >:( I hate port and http stuff sometimes.
Antec 900 Gaming Case, Nvidia XFX 780i 3 Way SLI Motherboard, 6 GB RAM, EVGA-Nvidia GeForce 9800 GTX + and Nvidia GeForce 8600 GT using 2 Way SLI, Pentium Dual Core Processor, Core Speed=2.6 MHz, 3 Monitors, 1150 GBs of hd storage, Win7=YEAH!


Offline Mars

  • Operator
  • Tireless poster
  • *****
    • Posts: 2056
    • View Profile
use an other port for hfs 7000 by example

and in ssl.conf

[https]
accept  = 0.0.0.0:443
connect = 127.0.0.1:7000
local = 127.0.0.1
TIMEOUTclose = 0



Offline FRENCH CAN CAN

  • Tireless poster
  • ****
    • Posts: 681
    • View Profile
Well thanks then.

I looked at some other posts and tried it the way they did it but it didn't work!

This is what I had by the way:
;[https]
;accept  = 443
;connect = 80
;TIMEOUTclose

It's not working every time I connect to my server.

Sorry if I am being annoying about this. :-[

Eliminate  ;

Correct:

[https]
accept  = 443
connect = 80
TIMEOUTclose = 0



cert = cert.pem
key  = key.pem


Offline uvbeenzaned

  • Occasional poster
  • *
    • Posts: 38
    • View Profile
Thanks!  I will get back around to this later! ;)
Antec 900 Gaming Case, Nvidia XFX 780i 3 Way SLI Motherboard, 6 GB RAM, EVGA-Nvidia GeForce 9800 GTX + and Nvidia GeForce 8600 GT using 2 Way SLI, Pentium Dual Core Processor, Core Speed=2.6 MHz, 3 Monitors, 1150 GBs of hd storage, Win7=YEAH!