<html><head></head><body><div style="font-family:verdana, helvetica, sans-serif;font-size:13px;"><div style="font-family:verdana, helvetica, sans-serif;font-size:13px;"><div><div><span><div style="font-family: verdana, helvetica, sans-serif;">Hi Eric,</div><div style="font-family: verdana, helvetica, sans-serif;"><br clear="none"></div><div style="font-family: verdana, helvetica, sans-serif;">I run my application with stunnel in the client mode (client = yes in config file) . I do not have control on the stunnel running in server mode though. </div><div style="font-family: verdana, helvetica, sans-serif;"><br clear="none"></div><div style="font-family: verdana, helvetica, sans-serif;">If i understand your mail correctly, the hack is to copy the certs to any local directory that should be accessible and then delete the same after the connection is established? I dont have problems maintaining the pem files if i can access the file system to create them, but i am exploring an option, which i couldnt figure out from the stunnel documentation, if i can specify the certs inside the configuration file for stunnel itself rather than feeding them through a file. I have an environment where the certificates and keys are available as strings to my applications and hence the idea is to use them directly in stunnel config rather than as a file.</div><div style="font-family: verdana, helvetica, sans-serif;"><br clear="none"></div><div class="ydpb1d81433yiv1835983772ydp14639be7signature" style="font-family: verdana, helvetica, sans-serif;"><div dir="ltr" style="margin-right: 0px;"><span style="font-family: "Helvetica Neue", Helvetica, Arial, "Lucida Grande", sans-serif; font-size: small;">Thanks</span><br></div></div></span></div><div class="ydpa46437e7signature"><div style="MARGIN-RIGHT:0px;" dir="ltr"><span style="font-family:'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;font-size:small;">Hari</span></div></div></div>
<div><br></div><div><br></div>
</div><div id="ydp13ed8e95yahoo_quoted_2592040241" class="ydp13ed8e95yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Tuesday, July 24, 2018, 4:20:32 AM GMT+5:30, Eric S Eberhard <flash@vicsmba.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="ydp13ed8e95yiv4504338111"><div><div class="ydp13ed8e95yiv4504338111WordSection1"><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">Use stunnel in inetd mode. Execute a script (or better C program). Copy the certificates for making the stunnel connection to a directory that is OK … then delete them immediately after stunnel starts. Hack – but might be OK for what you are doing.</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;"> </span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">I am not sure why anyone would think it more secure to put the keys into the stunnel command than to just use them from a file … but I likely do not know enough about your application to make a judgement.</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;"> </span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">Eric</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;"> </span></p><div><div style="border:none;border-bottom:solid windowtext 1.5pt;padding:0in 0in 1.0pt 0in;"><p class="ydp13ed8e95yiv4504338111MsoNormal" style="border:none;padding:0in;"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;"> </span></p></div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">Eric S Eberhard</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">VICS (Vertical Integrated Computer Systems)</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">Voice: 928 567 3529</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">Cell : 928 301 7537 (not reliable except for text or if not home)</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">2933 W Middle Verde Rd</span></p><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;">Camp Verde, AZ 86322</span></p></div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;color:#1F497D;"> </span></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in;"><p class="ydp13ed8e95yiv4504338111MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri", sans-serif;"> stunnel-users [mailto:stunnel-users-bounces@stunnel.org] <b>On Behalf Of </b>Hari<br><b>Sent:</b> Thursday, July 19, 2018 4:42 AM<br><b>To:</b> stunnel-users@stunnel.org<br><b>Subject:</b> [stunnel-users] Is there a way to specify certificate content in stunnel config</span></p></div></div><p class="ydp13ed8e95yiv4504338111MsoNormal"> </p><div><div><div><div><div><div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;">Hi,</span></p></div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;"> </span></p></div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;">I have a requirement where in i cannot specify the certificate and/or private key details as "files" to stunnel configuration, owing to the location and/or file system availability for stunnel to access them.</span></p></div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;"> </span></p></div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;">Is there a way to specify the actual certificate content in stunnel configuration (similar to other parameters like port numbers etc.,) so that the same can be leveraged.</span></p></div></div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;"> </span></p></div><div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-family:"Helvetica", sans-serif;">Thanks</span><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;"></span></p></div><div><p class="ydp13ed8e95yiv4504338111MsoNormal"><span style="font-family:"Helvetica", sans-serif;">Hari</span><span style="font-size:10.0pt;font-family:"Verdana", sans-serif;"></span></p></div></div></div></div></div></div></div><div id="ydp13ed8e95yiv4504338111DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2"><p class="ydp13ed8e95yiv4504338111MsoNormal"> </p><table class="ydp13ed8e95yiv4504338111MsoNormalTable" border="1" cellspacing="3" cellpadding="0" style="border:none;border-top:solid #D3D4DE 1.0pt;"><tbody><tr><td width="57" style="width:41.25pt;border:none;padding:9.75pt .75pt .75pt .75pt;"><p class="ydp13ed8e95yiv4504338111MsoNormal"><a href="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" rel="nofollow" target="_blank"><span style="text-decoration:none;"><img border="0" width="46" height="29" id="ydp13ed8e95yiv4504338111_x0000_i1025" src="https://ipmcdn.avast.com/images/icons/icon-envelope-tick-green-avg-v1.png" data-inlineimagemanipulating="true" draggable="false"></span></a></p></td><td width="415" style="width:352.5pt;border:none;padding:9.0pt .75pt .75pt .75pt;"><p class="ydp13ed8e95yiv4504338111MsoNormal" style="line-height:13.5pt;"><span style="font-size:10.0pt;font-family:"Arial", sans-serif;color:#41424E;">Virus-free. <a href="http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail" rel="nofollow" target="_blank"><span style="color:#4453EA;">www.avg.com</span></a> </span></p></td></tr></tbody></table><p class="ydp13ed8e95yiv4504338111MsoNormal"> </p></div></div></div></div></div>
</div>
</div></div></body></html>