stunnel.conf

setuid = stunnel
setgid = stunnel

pid = /var/run/stunnel/stunnel.pid

;foreground = yes
debug = info
output = /var/log/stunnel.log

include = /etc/stunnel/conf.d

[yandex-pop3]
client = yes
accept = 127.0.0.1:110
connect = pop.yandex.com:995
verifyChain = yes
CApath = /etc/ssl/certs
checkHost = pop.yandex.com
OCSPaia = yes

[yandex-imap]
client = yes
accept = 127.0.0.1:143
connect = imap.yandex.com:993
verifyChain = yes
CApath = /etc/ssl/certs
checkHost = imap.yandex.com
OCSPaia = yes

[yandex-smtp]
client = yes
accept = 127.0.0.1:25
connect = smtp.yandex.com:465
verifyChain = yes
CApath = /etc/ssl/certs
checkHost = smtp.yandex.com
OCSPaia = yes

[pop3s]
accept  = 995
connect = 110
cert = /etc/stunnel/certs/sni.pem

[imaps]
accept  = 993
connect = 143
cert = /etc/stunnel/certs/sni.pem

[ssmtp]
accept  = 465
connect = 25
cert = /etc/stunnel/certs/sni.pem