Downgrade mit stunnel: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
 
(Eine dazwischenliegende Version desselben Benutzers wird nicht angezeigt)
Zeile 4: Zeile 4:
 
*FQDN="www.xinux.de"
 
*FQDN="www.xinux.de"
 
*cd /etc/stunnel
 
*cd /etc/stunnel
=Checken der Zertifikate=
 
*ls *.{crt,key} 
 
ca.crt  www.xinux.de.crt  www.xinux.de.key
 
 
 
=Konfiguration=
 
=Konfiguration=
 
*cat<<HERE >stunnel.conf
 
*cat<<HERE >stunnel.conf
Zeile 17: Zeile 13:
 
[to-server]
 
[to-server]
 
client = yes
 
client = yes
accept = 127.0.0.1:80
+
accept = 0.0.0.0:80
 
connect = $FQDN:443
 
connect = $FQDN:443
 
CAPath = /etc/ssl/certs/
 
CAPath = /etc/ssl/certs/
 
verify = 2
 
verify = 2
 
[from-client]
 
accept  = 0.0.0.0:443
 
connect = 127.0.0.1:80
 
cert = /etc/stunnel/$FQDN.crt
 
key = /etc/stunnel/$FQDN.key
 
CAfile = /etc/stunnel/ca.crt
 
 
</pre>
 
</pre>
 
*HERE
 
*HERE
 +
 
=Restart=
 
=Restart=
 
* systemctl restart  stunnel4.service
 
* systemctl restart  stunnel4.service

Aktuelle Version vom 16. August 2021, 07:51 Uhr

Installation

  • apt install stunnel

Vorbereitung

  • FQDN="www.xinux.de"
  • cd /etc/stunnel

Konfiguration

  • cat<<HERE >stunnel.conf
debug = 7
options = NO_SSLv2
output = /var/log/stunnel.log

[to-server]
client = yes
accept = 0.0.0.0:80
connect = $FQDN:443
CAPath = /etc/ssl/certs/
verify = 2
  • HERE

Restart

  • systemctl restart stunnel4.service