Downgrade mit stunnel: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 13: Zeile 13:
 
[to-server]
 
[to-server]
 
client = yes
 
client = yes
accept = 0.0.0.0:80
+
accept = 127.0.0.1:80
 
connect = $FQDN:443
 
connect = $FQDN:443
 
CAPath = /etc/ssl/certs/
 
CAPath = /etc/ssl/certs/
Zeile 19: Zeile 19:
  
 
[from-client]
 
[from-client]
accept  = 0.0.0.0:993
+
accept  = 0.0.0.0:443
connect = 127.0.0.1:143
+
connect = 127.0.0.1:80
 
cert = /etc/stunnel/$FQDN.crt
 
cert = /etc/stunnel/$FQDN.crt
 
key = /etc/stunnel/$FQDN.key
 
key = /etc/stunnel/$FQDN.key

Version vom 15. August 2021, 18:13 Uhr

Installation

  • apt install stunnel

Konfiguration

  • FQDN="www.xinux.de"
  • cd /etc/stunnel
  • cat<<HERE >stunnel.conf
debug = 7
options = NO_SSLv2
output = /var/log/stunnel.log

[to-server]
client = yes
accept = 127.0.0.1:80
connect = $FQDN:443
CAPath = /etc/ssl/certs/
verify = 2

[from-client]
accept  = 0.0.0.0:443
connect = 127.0.0.1:80
cert = /etc/stunnel/$FQDN.crt
key = /etc/stunnel/$FQDN.key
CAfile = /etc/stunnel/ca.crt
  • HERE