On 01/09/2014 11:58 PM, Philippe Anctil wrote:
I see no good reason to connect to the application before the ssl session is established.
Good point. For the proxy protocol there is indeed no good reason for it.
Most other protocols require protocol negotiation to be performed before TLS handshake. The current implementation of protocol negotiation in stunnel does not distinguish those cases.
Mike