Downgrade mit stunnel

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen

Installation

  • apt install stunnel

Vorbereitung

  • FQDN="www.xinux.de"
  • cd /etc/stunnel

Konfiguration

  • cat<<HERE >stunnel.conf
debug = 7
options = NO_SSLv2
output = /var/log/stunnel.log

[to-server]
client = yes
accept = 127.0.0.1:80
connect = $FQDN:443
CAPath = /etc/ssl/certs/
verify = 2

[from-client]
accept  = 0.0.0.0:443
connect = 127.0.0.1:80
cert = /etc/stunnel/$FQDN.crt
key = /etc/stunnel/$FQDN.key
CAfile = /etc/stunnel/ca.crt
  • HERE