>From protocol.c in the stunnel source:<br><br>static const struct {<br> char *name;<br> struct {<br> PROTOCOL_PHASE type;<br> FUNCTION func;<br> } handlers[2];<br>} protocols[]={<br> {"proxy", {{PROTOCOL_PRE_SSL, proxy_server}, {PROTOCOL_PRE_SSL, NULL}}},<br>
{"cifs", {{PROTOCOL_PRE_CONNECT, cifs_server}, {PROTOCOL_PRE_SSL, cifs_client}}},<br> {"pgsql", {{PROTOCOL_PRE_CONNECT, pgsql_server}, {PROTOCOL_PRE_SSL, pgsql_client}}},<br> {"smtp", {{PROTOCOL_PRE_SSL, smtp_server}, {PROTOCOL_PRE_SSL, smtp_client}}},<br>
{"pop3", {{PROTOCOL_PRE_SSL, pop3_server}, {PROTOCOL_PRE_SSL, pop3_client}}},<br> {"imap", {{PROTOCOL_PRE_SSL, imap_server}, {PROTOCOL_PRE_SSL, imap_client}}},<br> {"nntp", {{PROTOCOL_NONE, NULL}, {PROTOCOL_PRE_SSL, nntp_client}}},<br>
{"connect", {{PROTOCOL_PRE_CONNECT, connect_server}, {PROTOCOL_PRE_SSL, connect_client}}},<br> {NULL, {{PROTOCOL_NONE, NULL}, {PROTOCOL_NONE, NULL}}}<br>};<br><br><b>STARTTLS</b> is an extension to plain text communication protocols, which offers a way to upgrade a plain text connection to an encrypted (<a href="http://en.wikipedia.org/wiki/Transport_Layer_Security" title="Transport Layer Security">TLS</a> or <a href="http://en.wikipedia.org/wiki/Secure_Socket_Layer" title="Secure Socket Layer" class="">SSL</a>) connection instead of using a separate port for encrypted communication.<br>
<br>stunnel will use one port to communicate the encrypted information. That's what it is telling you. No need to initiate a separate port when STARTTLS is sent.<br><br><div class="gmail_extra"><br><br><div class="gmail_quote">
On Wed, Dec 5, 2012 at 1:27 PM, John A. Wallace <span dir="ltr"><<a href="mailto:jw72253@verizon.net" target="_blank">jw72253@verizon.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<u></u>
<div>
<p dir="LTR"><span lang="en-us"><font face="Calibri">The Service Level Options of the manual</font></span><span lang="en-us"> <font face="Calibri">includes</font></span><span lang="en-us"><font face="Calibri"> the following point</font></span><span lang="en-us"><font face="Calibri">s:</font></span></p>
<p dir="LTR"><span lang="en-us"><b></b></span><span lang="en-us"><b></b></span><span lang="en-us"><b></b></span><a name="13b6c533af526871_"><span lang="en-us"><b><font face="Times New Roman">protocol = proto</font></b></span></a><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"></span></p>
<ul dir="LTR"><ul dir="LTR">
<p dir="LTR"><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Times New Roman">application protocol to negotiate SSL (e.g.</font></span><span lang="en-us"><i></i></span><span lang="en-us"><i></i></span><span lang="en-us"><i> <font face="Times New Roman">starttls</font></i></span><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Times New Roman"> or</font></span><span lang="en-us"><i></i></span><span lang="en-us"><i></i></span><span lang="en-us"><i> <font face="Times New Roman">stls</font></i></span><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Times New Roman">)</font></span></p>
<p dir="LTR"><span lang="en-us"><i></i></span><span lang="en-us"><i></i></span><span lang="en-us"><i><font face="Times New Roman">protocol</font></i></span><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Times New Roman"> option should not be used with SSL encryption on a separate port.</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Times New Roman">Currently supported protocols:</font></span></p>
</ul></ul>
<p dir="LTR"><span lang="en-us"><b><i><font face="Calibri">CIFS</font></i></b></span></p>
<p dir="LTR"><span lang="en-us"><b><i><font face="Calibri">Connect</font></i></b></span></p>
<p dir="LTR"><span lang="en-us"><b><i><font face="Calibri">Etc..</font></i></b></span><span lang="en-us"><b><i></i></b></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">However,</font></span><span lang="en-us"> <font face="Calibri">in the list</font></span><span lang="en-us"><font face="Calibri">ed</font></span><span lang="en-us"><font face="Calibri"> protocols supported neither</font></span><span lang="en-us"> <font face="Calibri">“</font></span><span lang="en-us"><font face="Calibri">starttls</font></span><span lang="en-us"><font face="Calibri">”</font></span><span lang="en-us"><font face="Calibri"> or</font></span><span lang="en-us"> <font face="Calibri">“</font></span><span lang="en-us"><font face="Calibri">stls</font></span><span lang="en-us"><font face="Calibri">”</font></span><span lang="en-us"><font face="Calibri"> appears</font></span><span lang="en-us"><font face="Calibri">, even though they appear to be options as far as I can see</font></span><span lang="en-us"> <font face="Calibri">from the above explanation. </font></span><span lang="en-us"> <font face="Calibri">Am I missing something here, or s</font></span><span lang="en-us"><font face="Calibri">hould they be among those in the list, and can one use this setting:</font></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Protocol=starttls</font></span></p>
<br>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Also, I don</font></span><span lang="en-us"><font face="Calibri">’</font></span><span lang="en-us"><font face="Calibri">t really understand</font></span><span lang="en-us"> <font face="Calibri">what this</font></span><span lang="en-us"> <font face="Calibri">statement</font></span><span lang="en-us"><font face="Calibri"> is telling me:</font></span><span lang="en-us"> <font face="Calibri">“</font></span><span lang="en-us"><i></i></span><span lang="en-us"><i></i></span><span lang="en-us"><i><font face="Times New Roman">protocol</font></i></span><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Times New Roman"> option should not be used with SSL encryption on a separate port.</font></span><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Times New Roman">”</font></span><span class="HOEnZb"><font color="#888888"><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"></span></font></span></p>
<span class="HOEnZb"><font color="#888888">
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Calibri">John A. Wallace</font></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
</font></span></div>
<br>_______________________________________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org">stunnel-users@stunnel.org</a><br>
<a href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users" target="_blank">https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</a><br>
<br></blockquote></div><br></div>