Stunnel

Author: h | 2025-04-24

Something like /tmp/stunnel-client.log. Fire up the stunnel server with stunnel stunnel-server.conf. Launch the stunnel client with stunnel stunnel-client.conf. We now have a secure tunnel Index of /downloads/archive/5.x Name Last modified Size Parent Directory - stunnel-5.00-android.zip 1.9M stunnel-5.00-installer.exe 1.3M stunnel-5.00-installer.exe.asc 190 stunnel-5.00.tar.gz 573K stunnel-5.00.tar.gz.asc 190 stunnel-5.00.tar.gz.sha256 86 stunnel

[stunnel-announce] stunnel 60 released - stunnel-announce

Descargar Stunnel 5.74 Fecha Publicado: 14 dic.. 2024 (hace 3 meses) Descargar Stunnel 5.73 Fecha Publicado: 10 sept.. 2024 (hace 6 meses) Descargar Stunnel 5.72 Fecha Publicado: 05 feb.. 2024 (hace 1 año) Descargar Stunnel 5.71 Fecha Publicado: 20 sept.. 2023 (hace 1 año) Descargar Stunnel 5.70 Fecha Publicado: 13 jul.. 2023 (hace 1 año) Descargar Stunnel 5.69 Fecha Publicado: 05 mar.. 2023 (hace 2 años) Descargar Stunnel 5.68 Fecha Publicado: 08 feb.. 2023 (hace 2 años) Descargar Stunnel 5.67 Fecha Publicado: 02 nov.. 2022 (hace 2 años) Descargar Stunnel 5.66 Fecha Publicado: 12 sept.. 2022 (hace 3 años) Descargar Stunnel 5.65 Fecha Publicado: 18 jul.. 2022 (hace 3 años) Descargar Stunnel 5.64 Fecha Publicado: 09 may.. 2022 (hace 3 años) Descargar Stunnel 5.63 Fecha Publicado: 16 mar.. 2022 (hace 3 años) Descargar Stunnel 5.62 Fecha Publicado: 18 ene.. 2022 (hace 3 años) Descargar Stunnel 5.61 Fecha Publicado: 23 dic.. 2021 (hace 3 años) Descargar Stunnel 5.60 Fecha Publicado: 17 ago.. 2021 (hace 4 años) Descargar Stunnel 5.59 Fecha Publicado: 06 abr.. 2021 (hace 4 años) Descargar Stunnel 5.58 Fecha Publicado: 21 feb.. 2021 (hace 4 años) Descargar Stunnel 5.57 Fecha Publicado: 12 oct.. 2020 (hace 4 años) Descargar Stunnel 5.56 Fecha Publicado: 22 nov.. 2019 (hace 5 años)

[stunnel-users] Stunnel, Pan and the

Descargar Stunnel 5.74 Fecha Publicado: 14 dic.. 2024 (hace 3 meses) Descargar Stunnel 5.73 Fecha Publicado: 10 sept.. 2024 (hace 7 meses) Descargar Stunnel 5.72 Fecha Publicado: 05 feb.. 2024 (hace 1 año) Descargar Stunnel 5.71 Fecha Publicado: 20 sept.. 2023 (hace 1 año) Descargar Stunnel 5.70 Fecha Publicado: 13 jul.. 2023 (hace 1 año) Descargar Stunnel 5.69 Fecha Publicado: 05 mar.. 2023 (hace 2 años) Descargar Stunnel 5.68 Fecha Publicado: 08 feb.. 2023 (hace 2 años) Descargar Stunnel 5.67 Fecha Publicado: 02 nov.. 2022 (hace 2 años) Descargar Stunnel 5.66 Fecha Publicado: 12 sept.. 2022 (hace 3 años) Descargar Stunnel 5.65 Fecha Publicado: 18 jul.. 2022 (hace 3 años) Descargar Stunnel 5.64 Fecha Publicado: 09 may.. 2022 (hace 3 años) Descargar Stunnel 5.63 Fecha Publicado: 16 mar.. 2022 (hace 3 años) Descargar Stunnel 5.62 Fecha Publicado: 18 ene.. 2022 (hace 3 años) Descargar Stunnel 5.61 Fecha Publicado: 23 dic.. 2021 (hace 3 años) Descargar Stunnel 5.60 Fecha Publicado: 17 ago.. 2021 (hace 4 años) Descargar Stunnel 5.59 Fecha Publicado: 06 abr.. 2021 (hace 4 años) Descargar Stunnel 5.58 Fecha Publicado: 21 feb.. 2021 (hace 4 años) Descargar Stunnel 5.57 Fecha Publicado: 12 oct.. 2020 (hace 4 años) Descargar Stunnel 5.56 Fecha Publicado: 22 nov.. 2019 (hace 5 años)

stunnel-msspi/aclocal.m4 at stunnel-5.60-cpro deemru/stunnel

In-transit encryption using oci-fss-utils or stunnel provides a way to secure your data between instances and mounted file systems using TLS v.1.2 (Transport Layer Security) encryption. Together with other methods of security such as Oracle Cloud InfrastructureVault and File Storage's encryption-at-rest, in-transit encryption provides for end-to-end security. Tip If you use Kerberos for authentication, the KRB5P security option provides authentication over NFS, data integrity (unauthorized modification of data in-transit), and data privacy as an alternative in-transit encryption option.For general information about getting started with file systems, see Overview of File Storage. For more information on the Vault service, see Overview of Vault. For more information on securing your file system, see About File Storage Security and the Securing File Storage reference in the Security Guide. In-transit encryption using oci-fss-utils or stunnel doesn't require any updates to your file system's mount target or export configuration, but the steps differ for Linux users and Windows users.PrerequisitesAdd the required rules to the security list for the mount target subnet. Alternatively, you can add the following rules to a Network Security Group (NSG) and then add the mount target to the NSG. For more information and instructions about adding security list rules for File Storage, see Configuring VCN Security Rules for File Storage, in particular Scenario C: Mount target and instance use TLS in-transit encryption. ImportantOnly the rules for TCP port 2051 are required for encrypted access. In-transit Encryption for Linux UsersTo enable in-transit encryption, you install a package called oci-fss-utils on the instance.. Something like /tmp/stunnel-client.log. Fire up the stunnel server with stunnel stunnel-server.conf. Launch the stunnel client with stunnel stunnel-client.conf. We now have a secure tunnel

stunnel-msspi/configure at stunnel-5.60-cpro deemru/stunnel

That the associated local network namespace is removed:Open a terminal window on the instance. Use the following command to unmount the file system:sudo umount -t oci-fss /mnt/yourmountpointReplace yourmountpoint with the path to the local mount point. In-transit Encryption for Windows UsersWindows clients can use stunnel to enable in-transit encryption to file systems.Limitations and ConsiderationsThe number of encrypted NFS/TLS connections for a single mount target is limited to 64. This limitation is caused by TLS memory requirements. Unlike NFS connections, TLS connections do not share memory buffers. So, once a TLS connection has been established, the allocated memory stays dedicated to it. DNS hostnames are not supported for mounting encrypted file systems. Use the mount target IP address to mount encrypted file systems.Setting up In-transit Encryption for WindowsThese instructions describe how to install and set up stunnel to use in-transit encryption with your file systems. Ensure that you meet the prerequisites before setting up in-transit encryption. Tip You can automate this process by using a batch script that contains the following steps.Setup TasksTask 2: Download and Install stunnelDownload and install stunnel from Note The last installation step requests certificate information. Entering a value here is optional.By default, stunnel is installed to the following directory: C:\Program Files (x86)\stunnelOpen the file C:\Program Files (x86)\stunnel\config\stunnel.cfg for editing and specify the following configuration:[mount] client=yes accept=127.0.0.1:2048 connect=10.0.1.155:2051 [nfs] client=yes accept=127.0.0.1:2049 connect=10.0.1.155:2051 [nlm] client=yes accept=127.0.0.1:2050 connect=10.0.1.155:2051 [rpcbind] client=yes accept=127.0.0.1:111 connect=10.0.1.155:2051Start stunnel using C:\Program Files (x86)\stunnel\bin\tstunnel.exe.Proceed to Task 3: Mount and Test Your Connection.Task 3: Mount and Test

stunnel-msspi/COPYING.md at stunnel-5.60-cpro baronrustamov/stunnel

Sorry, but you do not have the capability to view this topic Instructions given here are for linux based hosts (Ubuntu/Debian, other distro’s may vary). Stunnel works on windows too, but the instructions will not be exactly the same. This should work to proxy any audio stream, e.g. icecast too, with minor changes.1. Install stunnel; sudo apt install stunnel2. Setup letsencrypt and get your SSL/TLS certificates. Instructions here.3. Create your stunnel config; sudo nano /etc/stunnel/stunnel.confCopy/paste the following;[shoutcast]accept=8443connect=localhost:8000cert=/etc/letsencrypt/live/yourdomainhere.com/fullchain.pemkey=/etc/letsencrypt/live/yourdomainhere.com/privkey.pemand save the file (CTRL-O, Enter, CTRL-X). You will need to edit the config as per your setup. accept= the port you want the SSL enabled connection to access. connect= where your HTTP shoutcast admin pages and stream are served from. Change localhost to your domain name if your shoutcast isn’t on the same server that you’re install stunnel on. Change the port from 8000 to whatever you’re using. Cert and Key are SSL certificates that you generated in step 2 (change yourdomainhere.com to your own domain name).4. Edit the following;nano /etc/default/stunnel4and change ENABLED=0 to ENABLED=1, so that it starts automatically.5. Start stunnel;sudo service stunnel4 start6. Open up the HTTPS url, i.e. you should see your shoutcast pages, served up through the SSL/TLS proxy. You can now use your existing HTTP urls that you’re using for your streams by changing http:// to https:// and the port from 8000 (or whatever you’re using) toe 8443 (or whatever you set in stunnel).7. Do a little happy dance. Sorry, this forum is for verified users only. Please Login or Register to continue

stunnel-msspi/README.md at stunnel-5.60-cpro deemru/stunnel

We are using Squid proxy server in our environment and we want to cache HTTPS requests.Is there any way to configure Squid or in general a proxy server to cache HTTPS requests? asked Jan 18, 2012 at 9:47 3 There is a way to do it, but it's fundamentally against the reasons for using HTTPS.Here's how you'd do it. Generate a self-signed SSL Certificate for the site you'd like tointercept and cache the requests from. Install and run stunnel on your proxy server, telling it that the certificate it should present is the one generated in stage 1.Have stunnel forward the decrypted requests to squid.You might need to have stunnel on the other side, or openssl_client to re-encrypt the request to the upstream server.Caveats:Your users will hate you. Every SSL request to that site will present an invalid certificate window.You're exposing yourself to potential lawsuits for doing naughty things. (IANAL)You'll only ever be able to get a self-signed certificate working for this, because of how the PKI web of trust for SSL Certificates is supposed to work. Saying nothing about compromised root CAs.I'm not going to give you the exact details of how to do this, because a) I think it's somewhat unethical, and b) It's better for you to learn how to do it.I suggest you research how stunnel and man-in-the-middle attacks work. answered Jan 18, 2012 at 11:36 Tom O'ConnorTom O'Connor27.6k11 gold badges74 silver badges149 bronze badges 2 Just to explain why this can't be done without MITM - a proxy only sees the DNS name of the server you want to connect to when using encrypted HTTPS. It does not see the URL, nor any response headers. It cannot determine which individual resource you are accessing on a site, whether or not it is cacheable, nor what

stunnel-msspi/PORTS.md at stunnel-5.60-cpro kuzevanov/stunnel

Support in the future. What locations are IPv6-capable?All OpenVPN-IPv6 capable location are listed at "Server info" page, in "OpenVPN-IPv6" tab.And for IPsec, all IPv6-capable locations, are marked with this icon:How do I connect to IPv6 location?If you want to connect with IPsec IKEv2 - you don't need to make any changes on your side. After connection to IPv6-capable location, IPv6 address will be assigned to you automatically. If you need details, how to connect with IPsec IKEv2 - here are our guides:Windows guides.MacOS guide.iOS guide.Android guide.Linux guide.If you want to connect with OpenVPN - you will need to download new configs from this tab: If you need details, how to connect with OpenVPN protocol - here are our guides:Windows guide.MacOS guide.iOS guide.Android guide.Linux guide.Can I use stunnel with IPv6?Yes, IPv6 for stunnel is supported too. You can download it's configs from here:But please note the following:1. If you have only IPv4 address - you need to download configs for stunnel on 465 port. STUNNEL/443 won't work for you.2. If you have both IPv4&IPv6 or only IPv6 address - you need to download configs for Stunnel on 443 port.What type of IPv6 address will be assigned to my device?After connection to any IPv6-capable location, except from Sweden Public IP, you will receive Private IPv6 address called "Unique local". It's resides in fd00::/8 network and is similar to private addresses in IPv4 space.That address will be NATed to public IPv6 address, so all our customers will be hidden behind few public IPv6 addresses.. Something like /tmp/stunnel-client.log. Fire up the stunnel server with stunnel stunnel-server.conf. Launch the stunnel client with stunnel stunnel-client.conf. We now have a secure tunnel Index of /downloads/archive/5.x Name Last modified Size Parent Directory - stunnel-5.00-android.zip 1.9M stunnel-5.00-installer.exe 1.3M stunnel-5.00-installer.exe.asc 190 stunnel-5.00.tar.gz 573K stunnel-5.00.tar.gz.asc 190 stunnel-5.00.tar.gz.sha256 86 stunnel

stunnel-msspi/PORTS.md at stunnel-5.60-cpro deemru/stunnel

Stunnel: SSL encryption wrapper between the remote client and local or remote server SSL encryption wrapper between the remote client and local or remote serverStunnel is a robust utility that functions as an SSL encryption wrapper, between the remote client and local/remote server. You can use Stunnel to get more SSL capabilities without performing changes to code to the most frequently used inetd daemons, including POP2, POP3 and IMAP servers.It relies on OpenSSL or SSLeay libraries for cryptography thus it can handle any cryptographic algorithm included in your library. Stunnel supports load sharing among multiple backend servers and OpenSSL security features such as certificate-based access control, CRL and OCSP certificate revocation, SNI support for name-based virtual servers and more!Stunnel also comes equipped with special UNIX features like local mode with optional pseudo-terminal allocation, chroot – for extra securitt, syslog logging capability, Libwrap access control, EGD client, full support for UNIX socket and transparent proxy on the platforms of your choice.Windows specific features include a functional user interface, the ability to save cached peer certificate chains to files and Windows service mode. It also fully supports Ipv6, protocol negotiation for cifs, connect, imap, nntp, pop3, proxy, pgsql, and smtp, delayed resolver, graceful log file reopening and ident access control.

stunnel-msspi/COPYING.md at stunnel-5.60-cpro deemru/stunnel

Page-footer: QLOGDIR works with ngtcp2 and quiche- page-header: move up a URL paragraph from GLOBBING to URL- pytest: fix check for slow_network skips to only apply when intended- quic: don't set SNI if hostname is an IP address- quiche: adjust quiche `QUIC_IDLE_TIMEOUT` to 60s- quiche: enable quiche to handle timeout events- resolve: use PF_INET6 family lookups when CURL_IPRESOLVE_V6 is set- revert "schannel: reverse the order of certinfo insertions"- schannel: fix ordering of cert chain info- schannel: fix user-set legacy algorithms in Windows 10 & 11- schannel: verify hostname independent of verify cert- sectransp: fix compiler warnings- sectransp: prevent CFRelease() of NULL- secureserver.pl: fix stunnel path quoting- secureserver.pl: fix stunnel version parsing- SECURITY-PROCESS.md: not a sec issue: Tricking user to run a cmdline- system.h: add CURL_OFF_T definitions on HP-UX with HP aCC- test1304: build and skip without netrc support- test1554: check translatable string options in OS400 wrapper- test1608: make it build and get skipped without shuffle DNS support- test687/688: two more basic --xattr tests- tests/tftpd+mqttd: make variables static to silence picky warnings- tests: add 'large-time' as a testable feature- tests: add support for nested %if conditions- tests: don't call HTTP errors OK in test cases- tests: ensure `libcurl.def` contains all exports- tests: fix h3 server check and parallel instances- tests: TLS session sharing test- tests: update cookie expiry dates to far in the future- time-cond.d: mention what happens on a missing file- tool: avoid including leading spaces in the Location hyperlink- tool: change some fopen failures from warnings to errors- tool: make the length argument an int for printf()-.* flags- tool_cb_wrt: fix invalid unicode for windows console- tool_filetime: make -z work with file dates before 1970- tool_operate: allow both SSL_CERT_FILE and SSL_CERT_DIR- tool_operate: make aws-sigv4 not require TLS to be used- tool_paramhlp: improve str2num(): avoid unnecessary call to strlen()- tool_urlglob: use. Something like /tmp/stunnel-client.log. Fire up the stunnel server with stunnel stunnel-server.conf. Launch the stunnel client with stunnel stunnel-client.conf. We now have a secure tunnel

stunnel-msspi/Makefile.am at stunnel-5.60-cpro deemru/stunnel

The problem in UI3 and android seems to be my login ID but not sure why #6 Go into the BI settings tab and create a new user and try that. #7 Go into the BI settings tab and create a new user and try that. In the desktop version? #8 Yes - create another user that isn't tied to the Windows computer login.Make it like Temp and Temp for testing purposes. #9 Yes - create another user that isn't tied to the Windows computer login.Make it like Temp and Temp for testing purposes. hmm... ok i was able to access UI3 login locally on LAN with new id... but trying to access on my phone via app...it just spins like its trying to connect but stops with no errors... also trying to access UI3 login via phone with external wan ip results in error that site cant be reached #10 You need to establish a secure way to access your network from outside of your local LAN.VPN Primer VPN Primer for Noobs The internet is a force of nature; no video surveillance system made was designed to be exposed to those forces.. NEVER FORWARD PORTS to your NVR or Cameras, doing such things not only exposes you to severe security problems, but everyone else on the internet too.. Hackers dont want your video... ipcamtalk.com #11 You need to establish a secure way to access your network from outside of your local LAN.VPN Primer VPN Primer for Noobs The internet is a force of nature; no video surveillance system made was designed to be exposed to those forces.. NEVER FORWARD PORTS to your NVR or Cameras, doing such things not only exposes you to severe security problems, but everyone else on the internet too.. Hackers dont want your video... ipcamtalk.com I did I set up STUNNEL... #12 I'll leave you to the STUNNEL experts, but you've got something wrong with that configuration. #13 You need to establish a secure way to access your network from outside of your local LAN.VPN Primer VPN Primer for Noobs The internet is a force