On Fri, Jan 11, 2008 at 10:24:34PM +0100, Michal Trojnara wrote:
Please try the following beta version: ftp://stunnel.mirt.net/stunnel/stunnel-4.22b2.tar.gz
The file tools/stunnel.conf-sample.in was not converted to use automake's dirs. The following patch has the required changes:
---------------------------------------------------------------------- --- stunnel.orig/tools/stunnel.conf-sample.in 2008-01-14 23:12:28.000000000 -0600 +++ stunnel/tools/stunnel.conf-sample.in 2008-01-14 23:16:20.000000000 -0600 @@ -3,14 +3,14 @@ ; Please make sure you understand them (especially the effect of chroot jail)
; Certificate/key is needed in server mode and optional in client mode -cert = @prefix@/etc/stunnel/mail.pem -;key = @prefix@/etc/stunnel/mail.pem +cert = @sysconfdir@/stunnel/mail.pem +;key = @sysconfdir@/stunnel/mail.pem
; Protocol version (all, SSLv2, SSLv3, TLSv1) sslVersion = SSLv3
; Some security enhancements for UNIX systems - comment them out on Win32 -chroot = @prefix@/var/lib/stunnel/ +chroot = @localstatedir@/lib/stunnel/ setuid = nobody setgid = @DEFAULT_GROUP@ ; PID is created inside chroot jail @@ -30,12 +30,12 @@ ; CApath is located inside chroot jail ;CApath = /certs ; It's often easier to use CAfile -;CAfile = @prefix@/etc/stunnel/certs.pem +;CAfile = @sysconfdir@/stunnel/certs.pem ; Don't forget to c_rehash CRLpath ; CRLpath is located inside chroot jail ;CRLpath = /crls ; Alternatively you can use CRLfile -;CRLfile = @prefix@/etc/stunnel/crls.pem +;CRLfile = @sysconfdir@/stunnel/crls.pem
; Some debugging stuff useful for troubleshooting ;debug = 7 ----------------------------------------------------------------------