[stunnel-users] Access an arbitrary https website on http://localhost:3000 via stunnel.

Thu Jan 14 09:52:56 CET 2016

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Hongyi,

My hint:

$ curl -s http://localhost:3000/
Cannot GET /

$ curl -s -H 'Host: coolaj86.com' http://localhost:3000/
<!DOCTYPE html>
<html lang="en">
  <head>
    <meta charset="utf-8">
    <title>AJ ONeal</title>
...

Best regards,
	Mike

On 14.01.2016 05:51, Hongyi Zhao wrote:
> Hi all,
> 
> Based on the descriptions on the following webpage:
> 
> http://plug.org/pipermail/plug/2015-August/033939.html
> 
> I do the following testing:
> 
> 1- Complile and install the lastest stunnel, i.e., the 
> stunnel-5.29.
> 
> 2- Obtaining the root cert
> 
> wget -q 
> https://gist.githubusercontent.com/coolaj86/327cee3eee6fc119b389/raw/r
oot.pem
>
>
- -O
> 
/tmp/root.pem
> 
> 3- Prepare the following config file for stunnel:
> 
> pid = /tmp/stunnel-tlsvpn.pid
> 
> client = yes verify = 1 foreground = yes
> 
> [tlsvpn] accept = localhost:3000 sni = coolaj86.com connect = 
> coolaj86.com:443 CAfile = /tmp/root.pem
> 
> 4- Starting the stunnel:
> 
> $ stunnel ./stunnel-tlsvpn.conf
> 
> 5- Testing:
> 
> At this moment, I use the firefox to open the following url:
> 
> http://localhost:3000
> 
> But the firefox will only give the following line in its windows:
> 
> Cannot GET /
> 
> Any hints on this issue?
> 
> Regards
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=WAxt
-----END PGP SIGNATURE-----