Greetings!
I have the ssl files from ZeroSSL, and I am trying to set up https using stunnel4 on an ubuntu server. I am new to https, I would love some of your help setting this up. Here is what I have done so far: 1. Installed Althttpd and http is working fine on the home network and from the external network.
2. I have installed stunnel4 on the ubuntu server jcabrera@selva:~$ stunnel -v [ ] Clients allowed=500 [.] stunnel 5.56 on x86_64-pc-linux-gnu platform [.] Compiled with OpenSSL 1.1.1c 28 May 2019 [.] Running with OpenSSL 1.1.1f 31 Mar 2020 [.] Threading:PTHREAD Sockets:POLL,IPv6,SYSTEMD TLS:ENGINE,FIPS,OCSP,PSK,SNI Auth:LIBWRAP [ ] errno: (*__errno_location ()) [!] Invalid configuration file name "-v" [!] realpath: No such file or directory (2) [ ] Deallocating section defaults
3. I have placed the ZeroSSl ssl files on the ssl directory as per ZeroSSL instructions jcabrera@selva:~$ ls -l /etc/ssl/*.crt -rw-r--r-- 1 root root 2431 Oct 20 16:27 /etc/ssl/ca_bundle.crt -rw-r--r-- 1 root root 2354 Oct 20 16:31 /etc/ssl/certificate.crt root@selva:/home/jcabrera# ls -l /etc/ssl/private/*.key -rw-r--r-- 1 root root 1702 Oct 20 16:33 /etc/ssl/private/private.key
4. Created the the /etc/stunnel/stunnel.conf file with these entries: root@selva:/home/jcabrera# cat /etc/stunnel/stunnel.conf cert = /etc/ssl/certificate.crt key = /etc/ssl/private/private.key [https] accept = :::443 TIMEOUTclose = 0 exec = /usr/bin/althttpd execargs = /usr/bin/althttpd -logfile ~/www/http.log -root ~/www -user www-data -https 1
And, I don't know what else to do. Any help would be greatly appreciated. Thanks.
josé
Hi. I really would like to get this working. If anyone is out there. This is what I get when I run this command: jcabrera@selva:~$ stunnel /etc/stunnel/stunnel.conf [ ] Clients allowed=500 [.] stunnel 5.56 on x86_64-pc-linux-gnu platform [.] Compiled with OpenSSL 1.1.1c 28 May 2019 [.] Running with OpenSSL 1.1.1f 31 Mar 2020 [.] Threading:PTHREAD Sockets:POLL,IPv6,SYSTEMD TLS:ENGINE,FIPS,OCSP,PSK,SNI Auth:LIBWRAP [ ] errno: (*__errno_location ()) [.] Reading configuration from file /etc/stunnel/stunnel.conf [.] UTF-8 byte order mark not detected [!] /etc/stunnel/stunnel.conf:4: "[https]": No '=' found [ ] Deallocating section defaults jcabrera@selva:~$
What does it mean " [!] /etc/stunnel/stunnel.conf:4: "[https]": No '=' found"? I have duckduckgo this all over and I have not found but one link for this. Any suggestions? Or spot to read? Thanks.
josé
On Thu, Oct 21, 2021 at 6:15 PM jose isaias cabrera jicman@gmail.com wrote:
Greetings!
I have the ssl files from ZeroSSL, and I am trying to set up https using stunnel4 on an ubuntu server. I am new to https, I would love some of your help setting this up. Here is what I have done so far:
- Installed Althttpd and http is working fine on the home network and
from the external network.
- I have installed stunnel4 on the ubuntu server
jcabrera@selva:~$ stunnel -v [ ] Clients allowed=500 [.] stunnel 5.56 on x86_64-pc-linux-gnu platform [.] Compiled with OpenSSL 1.1.1c 28 May 2019 [.] Running with OpenSSL 1.1.1f 31 Mar 2020 [.] Threading:PTHREAD Sockets:POLL,IPv6,SYSTEMD TLS:ENGINE,FIPS,OCSP,PSK,SNI Auth:LIBWRAP [ ] errno: (*__errno_location ()) [!] Invalid configuration file name "-v" [!] realpath: No such file or directory (2) [ ] Deallocating section defaults
- I have placed the ZeroSSl ssl files on the ssl directory as per ZeroSSL
instructions jcabrera@selva:~$ ls -l /etc/ssl/*.crt -rw-r--r-- 1 root root 2431 Oct 20 16:27 /etc/ssl/ca_bundle.crt -rw-r--r-- 1 root root 2354 Oct 20 16:31 /etc/ssl/certificate.crt root@selva:/home/jcabrera# ls -l /etc/ssl/private/*.key -rw-r--r-- 1 root root 1702 Oct 20 16:33 /etc/ssl/private/private.key
- Created the the /etc/stunnel/stunnel.conf file with these entries:
root@selva:/home/jcabrera# cat /etc/stunnel/stunnel.conf cert = /etc/ssl/certificate.crt key = /etc/ssl/private/private.key [https] accept = :::443 TIMEOUTclose = 0 exec = /usr/bin/althttpd execargs = /usr/bin/althttpd -logfile ~/www/http.log -root ~/www -user www-data -https 1
And, I don't know what else to do. Any help would be greatly appreciated. Thanks.
josé
--
What if eternity is real? Where will you spend it? Hmmmm...
On Sun, 2021-11-14 21:29:32 -0500, jose isaias cabrera wrote:
[..]
What does it mean " [!] /etc/stunnel/stunnel.conf:4: "[https]": No '=' found"?
José,
I think it stunnel wants to say “I tried to read this line as a ‘<name>=<value>’ line, but did not find the equal sign”.
Do you really have backslashes in front of ‘[’ and ‘]’ in your configuration file? This may be the reason stunnel does not recognize this line as a section header ...
Ludolf
On Mon, Nov 15, 2021 at 3:24 AM Ludolf Holzheid lholzheid@bihl-wiedemann.de wrote:
On Sun, 2021-11-14 21:29:32 -0500, jose isaias cabrera wrote:
[..]
What does it mean " [!] /etc/stunnel/stunnel.conf:4: "[https]": No '=' found"?
José,
I think it stunnel wants to say “I tried to read this line as a ‘<name>=<value>’ line, but did not find the equal sign”.
Do you really have backslashes in front of ‘[’ and ‘]’ in your configuration file? This may be the reason stunnel does not recognize this line as a section header ...
Thanks.
-
jose isaias cabrera -
Ludolf Holzheid