stunnel command line parameters

[saymen]

I don't get stunnel to work. I have CentOS 5.2. stunnel --version says 4.15. Even after yum upgrade I got only 4.15.

I've seen that some use commands like that:

stunnel -p /etc/ssl/certs/stunnel.pem -d https -r scalixhost.local:80

I have no option "-p" oder "-d". Why, is my version too old?

Any ideas?

[Valerion]

It's better to put everything in the stunnel config file, then you don't need to supply all the command line parameters (see the man page).

For HTTP traffic you should use mod_ssl with apache, not stunnel, as it causes issues with accounting and security.

[seanyseansean]

The version of stunnel on Centos 5.2 is a bit behind and missed a lot of the options in the latest one, such as prohibiting sslv2 connections and only allowing sslv3. We used one from a later fedora distro, which isn't ideal but seems to work ok.