Re: [stunnel-users] TCP (Server / Client)

This is a discussion on Re: [stunnel-users] TCP (Server / Client) within the Stunnel Users forums, part of the Networking and Network Related category; --===============0514576978== Content-Type: multipart/alternative; boundary="_ecd95981-ad96-4407-835a-98330d90a9fe_" --_ecd95981-ad96-4407-835a-98330d90a9fe_ Content-Type: ...

		Usenet Forums > Networking and Network Related > Stunnel Users
Re: [stunnel-users] TCP (Server / Client)

LinkBack

Thread Tools

Display Modes

#1 (permalink)

01-09-2008

khaled khaled

Posts: n/a

Re: [stunnel-users] TCP (Server / Client)

--===============0514576978==
Content-Type: multipart/alternative;
boundary="_ecd95981-ad96-4407-835a-98330d90a9fe_"

--_ecd95981-ad96-4407-835a-98330d90a9fe_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,
I have a normal TCP server which listenning to 192.168.1.4:4433 address. th=
e client (192.168.1.5) will connect with the serveur via Port serie .I want=
to make a root certificate CA, which will generate 2 pairs ( key + certi=
ficate) one for the server and one for the client. 1-Root certificate : CA2=
-Key + certificate:for the Client 3-Key + certificate:for the Server I do n=
ot know how to configure the SSL elements in Stunnel, I am using Windows XP=
..
=20
=20
My config: Stunnel.config for the server:
; Some performance tuningssocket =3D l:TCP_NODELAY=3D1socket =3D r:TCP_NODE=
LAY=3D1
output =3D stunnel.log
; Authentication stuffverify =3D 1
; It's often easier to use CAfileCAfile =3D ca.pemcert =3D stunnel.pem debu=
g =3D 7;foreground=3Dyes client =3D no[server]accept =3D 4433 connect =3D =
192.168.1.4:4433
=20
=20
But doesn't work :(
=20
thanks,

KHALED Khaled
Ing=E9nieur de t=E9l=E9communications et informatique

=20
> Date: Tue, 8 Jan 2008 10:29:19 -0800> From: bri@stunnel.org> To: kkhaled@=
hotmail.fr> CC: stunnel-users@mirt.net; stunnel-users-owner@mirt.net> Subje=
ct: Re: [stunnel-users] TCP (Server / Client)> > Sometime near 2008-01-08 1=
0:30 +0100, khaled khaled harangued:> > > I am a new STUNNEL user,I will do=
2 secure sockets TCP (Server / Client). I > > would like to know how to se=
t 'stunnel.conf. I tried but it does not work.> > You need to be more clear=
about > > 1) what IP/Port you want to accept on> 2) if you're accepting cl=
eartext or ssl> > 3) what IP/Port you want to connect to (or prrogam to lau=
nch)> 4) if you're sending cleartext or ssl> (this should be the opposite o=
f #2 above)> > > cert =3D server.crt > > key =3D serverkey.key> > CAfile =
=3D ca.crt> > accept =3D 192.168.1.4:4433> > connect =3D 192.168.1.4:4433> =
> You have stunnel accepting connections and send them to itself.> While a =
recursive loop may be fun, I doubt it's what you> actually wanted.> > > -- =
> Brian Hatch Friends come and go,> Systems and but enemies accumulate.> Se=
curity Engineer> http://www.ifokr.org/bri/> > Every message PGP signed
__________________________________________________ _______________
Nouveau ! Cr=E9ez votre profil Messenger !
http://home.services.spaces.live.com/=

--_ecd95981-ad96-4407-835a-98330d90a9fe_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<style>
..hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class=3D'hmmessage'>
Hi, 
<DIV id=3Dresult_box dir=3Dltr>I have a normal TCP server which listenning =
to 192.168.1.4:4433 address. the client (192.168.1.5) will connect with the=
serveur via Port serie .I want to make a root  certificate =
CA, which will generate 2 pairs (  key + certificate) one for the serv=
er and one for the client. 1-Root certificate : CA 2-Key + certifica=
te:for the Client 3-Key + certificate:for the Server I do=
not know how to configure the SSL elements in Stunnel, I am using Wind=
ows XP.</DIV>
  
  
My config: Stunnel.config for the server: 
; Some performance tunings socket =3D l:TCP_NODELAY=3D1 socket =3D r:=
TCP_NODELAY=3D1 
output =3D stunnel.log 
; Authentication stuff verify =3D 1 
; It's often easier to use CAfile CAfile =3D ca.pem cert =3D stunnel.=
pem debug =3D 7 ;foreground=3Dyes client =3D no [server] a=
ccept  =3D 4433 connect =3D 192.168.1.4:4433 
  
  
But doesn't work :( 
  
thanks, 
<DIV>

<DIV>
<IMG height=3D2 src=3D"http://graphics.hotmail.com/greyp=
ixel.gif" width=3D"100%" vspace=3D9>KHALED Khaled</=
P>
Ing=E9nieur d=
e t=E9l=E9communications et informatique

<IMG height=
=3D2 src=3D"http://graphics.hotmail.com/greypixel.gif" width=3D"100%" vspac=
e=3D9>=20
 </DIV></DI=
V> > Date: Tue, 8 Jan 2008 10:29:19 -0800 > From: bri@stunn=
el.org > To: kkhaled@hotmail.fr > CC: stunnel-users@mirt.net; s=
tunnel-users-owner@mirt.net > Subject: Re: [stunnel-users] TCP (Serve=
r / Client) > > Sometime near 2008-01-08 10:30 +0100, khaled k=
haled harangued: > > > I am a new STUNNEL user,I will do 2 =
secure sockets TCP (Server / Client). I > > would like to know ho=
w to set 'stunnel.conf. I tried but it does not work. > > You =
need to be more clear about > > 1) what IP/Port you want to a=
ccept on > 2) if you're accepting cleartext or ssl > > 3=
) what IP/Port you want to connect to (or prrogam to launch) > 4) if =
you're sending cleartext or ssl > (this should be the opposite of #2 =
above) > > > cert =3D server.crt > > key =3D serv=
erkey.key > > CAfile =3D ca.crt > > accept =3D 192.168.1.=
4:4433 > > connect =3D 192.168.1.4:4433 > > You have =
stunnel accepting connections and send them to itself. > While a recu=
rsive loop may be fun, I doubt it's what you > actually wanted. &g=
t; > > -- > Brian Hatch Friends come and go, > S=
ystems and but enemies accumulate. > Security Engineer > http:/=
/www.ifokr.org/bri/ > > Every message PGP signed <hr =
/>Windows Live Messenger 2008 vient de sortir, encore plus de fun ! <a hre=
f=3D'http://www.windowslive.fr/majmessenger.asp' target=3D'_new'>T=E9l=E9ch=
argez gratuitement Messenger 2008</a></body>
</html>=

--_ecd95981-ad96-4407-835a-98330d90a9fe_--

--===============0514576978==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
stunnel-users mailing list
stunnel-users@mirt.net
http://stunnel.mirt.net/mailman/listinfo/stunnel-users

--===============0514576978==--

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts vB code is On Smilies are Off [IMG] code is Off HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

All times are GMT +1. The time now is 06:26 PM.