[stunnel-users] TCP (Server / Client)

[James K. Blakely]

How do I opt out of these e mails?
Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: Brian Hatch <bri at stunnel.org>

Date: Wed, 9 Jan 2008 06:58:14 
To:khaled khaled <kkhaled at hotmail.fr>
Cc:stunnel-users-owner at mirt.net, stunnel-users at mirt.net
Subject: Re: [stunnel-users] TCP (Server / Client)


Right around 2008-01-09 10:21 +0100, khaled khaled expressed:

First, your emails are coming through without any line breaks
which makes them almost impossible to read.  I'm re-factoring
it so I can reply better, but if you can fix your mailer to
actually work with non-HTML mail clients, that'd be nice.


> I have a normal TCP server which listenning to
> 192.168.1.4:4433 address.

Gotcha.

> the client (192.168.1.5) will
> connect with the serveur via Port serie .I want to make a
> root  certificate CA, which will generate 2 pairs (  key
> + certificate) one for the server and one for the client.
> 1-Root certificate : CA2-Key + certificate:for the Client
> 3-Key + certificate:for the Server I do not know how to
> configure the SSL elements in Stunnel, I am using Windows
> XP.

Let's not even talk about the certs yet.  We're not even close
to that yet.

When a connection comes to stunnel 192.168.1.4:4433 (SSL), where
should it send it (cleartext)?

Start with just the default ssl cert, don't go creating new certs
or CA-signed certs, and get the actual conectivity working first.
You're still working on the 'accept' and 'connect' part of the
configuration.

Send us the output of the debug log and what you see from the client.



-- 
Brian Hatch                  A picture is worth
   Systems and                a thousand words,
   Security Engineer          but it uses up a
http://www.ifokr.org/bri/     lot more disk space.

Every message PGP signed

_______________________________________________
stunnel-users mailing list
stunnel-users at mirt.net
http://stunnel.mirt.net/mailman/listinfo/stunnel-users