An SSL-encrypting socket wrapper
.cvsignore | ||
Certificate-Creation | ||
Makefile | ||
nss_compat_ossl-0.9.1-stunnel.patch | ||
pop3-redirect.xinetd | ||
README.NSS | ||
sfinger.xinetd | ||
sources | ||
stunnel-4.08-authpriv.patch | ||
stunnel-4.18-sample.patch | ||
stunnel-4.20-nss.patch | ||
stunnel-pop3s-client.conf | ||
stunnel-sfinger.conf | ||
stunnel.spec |
To convert an existing stunnel set up to NSS, at minimum it is necessary to: - create a NSS database directory, $SSL_DIR $ certutil -d $SSL_DIR -N - import server and CA certificates: $ certutil -d $SSL_DIR -A -n server_cert_nickname -i server_cert.pem - import server private key: $ openssl pkcs12 -export -in server_key.pem -out server_key.pfx $ pk12util -d $SSL_DIR -i server_key.pfx - modify stunnel.conf to use "server_cert_nickname" instead of path to "server_cert.pem" in "cert" - when starting stunnel, make sure $SSL_DIR is present in the environment