Page 1 of 1

stunnel command line parameters

Posted: Tue Jul 15, 2008 4:40 am
by saymen
I don't get stunnel to work. I have CentOS 5.2. stunnel --version says 4.15. Even after yum upgrade I got only 4.15.

I've seen that some use commands like that:

stunnel -p /etc/ssl/certs/stunnel.pem -d https -r scalixhost.local:80

I have no option "-p" oder "-d". Why, is my version too old?

Any ideas?

Posted: Tue Jul 15, 2008 5:00 am
by Valerion
It's better to put everything in the stunnel config file, then you don't need to supply all the command line parameters (see the man page).

For HTTP traffic you should use mod_ssl with apache, not stunnel, as it causes issues with accounting and security.

Posted: Fri Aug 01, 2008 3:39 am
by seanyseansean
The version of stunnel on Centos 5.2 is a bit behind and missed a lot of the options in the latest one, such as prohibiting sslv2 connections and only allowing sslv3. We used one from a later fedora distro, which isn't ideal but seems to work ok.