Created
January 3, 2013 15:15
-
-
Save anonymous/4444205 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
; Sample stunnel configuration file by Michal Trojnara 2002-2009 | |
; Some options used here may not be adequate for your particular configuration | |
; Please make sure you understand them (especially the effect of the chroot jail) | |
; Certificate/key is needed in server mode and optional in client mode | |
;cert = /etc/ssl/certs/stunnel.pem | |
cert = /etc/stunnel/stunnel.pem | |
;key = /etc/ssl/certs/stunnel.pem | |
; Protocol version (all, SSLv2, SSLv3, TLSv1) | |
#sslVersion = SSLv3 | |
sslVersion = TLSv1 | |
; Some security enhancements for UNIX systems - comment them out on Win32 | |
chroot = /var/lib/stunnel4/ | |
setuid = stunnel4 | |
setgid = stunnel4 | |
; PID is created inside the chroot jail | |
pid = /stunnel4.pid | |
; Some performance tunings | |
socket = l:TCP_NODELAY=1 | |
socket = r:TCP_NODELAY=1 | |
;compression = zlib | |
; Workaround for Eudora bug | |
;options = DONT_INSERT_EMPTY_FRAGMENTS | |
options = NO_SSLv2 | |
; Authentication stuff | |
;verify = 2 | |
; Don't forget to c_rehash CApath | |
; CApath is located inside chroot jail | |
;CApath = /certs | |
; It's often easier to use CAfile | |
;CAfile = /etc/stunnel/certs.pem | |
; Don't forget to c_rehash CRLpath | |
; CRLpath is located inside chroot jail | |
;CRLpath = /crls | |
; Alternatively you can use CRLfile | |
;CRLfile = /etc/stunnel/crls.pem | |
foreground = yes | |
; Some debugging stuff useful for troubleshooting | |
;debug = 7 | |
output = /var/log/stunnel4/stunnel.log | |
; Use it for client mode | |
;client = yes | |
client = no | |
; Service-level configuration | |
;[pop3s] | |
;accept = 995 | |
;connect = 110 | |
;[imaps] | |
;accept = 993 | |
;connect = 143 | |
;[ssmtp] | |
;accept = 465 | |
;connect = 25 | |
;[https] | |
;accept = 58080 | |
;connect = 127.0.0.1:3128 | |
;TIMEOUTclose = 0 | |
[squid] | |
accept = 8888 | |
connect = 3128 | |
; vim:ft=dosini | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment