Downgrade mit stunnel

Installation

• apt install stunnel

Vorbereitung

• FQDN="www.xinux.de"
• cd /etc/stunnel

Konfiguration

• cat<<HERE >stunnel.conf

debug = 7
options = NO_SSLv2
output = /var/log/stunnel.log

[to-server]
client = yes
accept = 0.0.0.0:80
connect = $FQDN:443
CAPath = /etc/ssl/certs/
verify = 2

• HERE

Restart

• systemctl restart stunnel4.service