stunnel.conf (1209B)
1 ; Drop privileges 2 setuid = nobody 3 setgid = nogroup 4 5 ; When running under procd, stay in foreground 6 foreground = yes 7 8 ; Don't log to stderr, use syslog 9 syslog = yes 10 11 ; 1-7. Use 7 for greatest verbosity 12 ;debug = 5 13 14 ; Starting here, enter your services or uncomment the examples 15 16 ; Example: 17 ; If your local httpd does not support HTTPS, use stunnel in remote 18 ; mode to forward TLS connections coming in on port 443 to non-TLS 19 ; on port 80. 20 ; Make sure that the cert is available. 21 ;[httpd] 22 ;accept = 443 23 ;connect = 127.0.0.1:80 24 ;cert = /etc/stunnel/stunnel.pem 25 26 ; Example: 27 ; If your local email client does not support TLS, 28 ; use stunnel in client mode to forward non-TLS connections on 29 ; port 143 to TLS-enabled servername:993. 30 ;[imap] 31 ;client = yes 32 ;accept = 143 33 ;connect = servername:993 34 ; Disable peer verification - be sure to understand the limitations of peer 35 ; verification in stunnel when enabling. 36 ;verify = 0 37 38 ; Default client section: 39 ; stunnel requires at least one section to start successfully. 40 ; You can safely remove this section once you have configured 41 ; your own. We use client mode here as server requires a certificate. 42 [dummy] 43 client = yes 44 accept = localhost:6000 45 connect = localhost:6001