<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Hi,<BR><BR>
<DIV id=result_box dir=ltr>I have a normal TCP server which listenning to 192.168.1.4:4433 address. the client (192.168.1.5) will connect with the serveur via Port serie .I want to make a root certificate CA, which will generate 2 pairs ( key + certificate) one for the server and one for the client. <BR>1-Root certificate : CA<BR>2-Key + certificate:for the Client <BR>3-Key + certificate:for the Server <BR>I do not know how to configure the SSL elements in Stunnel, <BR>I am using Windows XP.</DIV>
<BR>
<BR>
My config: Stunnel.config for the server:<BR>
; Some performance tunings<BR>socket = l:TCP_NODELAY=1<BR>socket = r:TCP_NODELAY=1<BR>
output = stunnel.log<BR>
; Authentication stuff<BR>verify = 1<BR>
; It's often easier to use CAfile<BR>CAfile = ca.pem<BR>cert = stunnel.pem <BR>debug = 7<BR>;foreground=yes <BR>client = no<BR>[server]<BR>accept = 4433 <BR>connect = 192.168.1.4:4433<BR>
<BR>
<BR>
But doesn't work :(<BR>
<BR>
thanks,<BR><BR>
<DIV>
<P class=EC_MsoNormal><FONT face="Times New Roman" size=3></FONT></P>
<DIV>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 7.5pt; COLOR: #0066cc; FONT-FAMILY: Tahoma"><IMG height=2 src="http://graphics.hotmail.com/greypixel.gif" width="100%" vspace=9><STRONG>KHALED Khaled</STRONG></SPAN></P>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 7.5pt; COLOR: #0066cc; FONT-FAMILY: Tahoma"><FONT face="Lucida Handwriting, Cursive">Ing�nieur de t�l�communications et informatique</FONT></SPAN></P>
<P class=EC_MsoNormal>
<P class=EC_MsoNormal><SPAN style="FONT-SIZE: 7.5pt; COLOR: #0066cc; FONT-FAMILY: Tahoma"><FONT face="Times New Roman"></FONT></SPAN></P><SPAN style="FONT-SIZE: 7.5pt; COLOR: #0066cc; FONT-FAMILY: Tahoma"><IMG height=2 src="http://graphics.hotmail.com/greypixel.gif" width="100%" vspace=9></SPAN>
<BR><SPAN style="FONT-SIZE: 7.5pt; FONT-FAMILY: Tahoma"></SPAN></DIV></DIV><BR><BR>> Date: Tue, 8 Jan 2008 10:29:19 -0800<BR>> From: bri@stunnel.org<BR>> To: kkhaled@hotmail.fr<BR>> CC: stunnel-users@mirt.net; stunnel-users-owner@mirt.net<BR>> Subject: Re: [stunnel-users] TCP (Server / Client)<BR>> <BR>> Sometime near 2008-01-08 10:30 +0100, khaled khaled harangued:<BR>> <BR>> > I am a new STUNNEL user,I will do 2 secure sockets TCP (Server / Client). I <BR>> > would like to know how to set 'stunnel.conf. I tried but it does not work.<BR>> <BR>> You need to be more clear about <BR>> <BR>> 1) what IP/Port you want to accept on<BR>> 2) if you're accepting cleartext or ssl<BR>> <BR>> 3) what IP/Port you want to connect to (or prrogam to launch)<BR>> 4) if you're sending cleartext or ssl<BR>> (this should be the opposite of #2 above)<BR>> <BR>> > cert = server.crt <BR>> > key = serverkey.key<BR>> > CAfile = ca.crt<BR>> > accept = 192.168.1.4:4433<BR>> > connect = 192.168.1.4:4433<BR>> <BR>> You have stunnel accepting connections and send them to itself.<BR>> While a recursive loop may be fun, I doubt it's what you<BR>> actually wanted.<BR>> <BR>> <BR>> -- <BR>> Brian Hatch Friends come and go,<BR>> Systems and but enemies accumulate.<BR>> Security Engineer<BR>> http://www.ifokr.org/bri/<BR>> <BR>> Every message PGP signed<BR><br /><hr />Windows Live Messenger 2008 vient de sortir, encore plus de fun ! <a href='http://www.windowslive.fr/majmessenger.asp' target='_new'>T�l�chargez gratuitement Messenger 2008</a></body>
</html>