Bonjour,
STunnel = serveur d'encapsulation SSL | équivalent à
SSLExplorer pour Win.
J'ai trouvé un example de configuration :
; Sample stunnel configuration file by Michal Trojnara 2002-2006
; Some options used here may not be adequate for your particular configuration
; Please make sure you understand them (especially the effect of chroot jail)
; Certificate/key is needed in server mode and optional in client mode
cert = /etc/stunnel/mail.crt
;key = /etc/stunnel/mail.key
; Protocol version (all, SSLv2, SSLv3, TLSv1)
sslVersion = SSLv3
; Some security enhancements for UNIX systems - comment them out on Win32
chroot = /var/run/stunnel/
setuid = nobody
setgid = nobody
; PID is created inside chroot jail
pid = /stunnel.pid
; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
;compression = rle
; Workaround for Eudora bug
;options = DONT_INSERT_EMPTY_FRAGMENTS
; Authentication stuff
;verify = 2
; Don't forget to c_rehash CApath
; CApath is located inside chroot jail
;CApath = /certs
; It's often easier to use CAfile
;CAfile = /etc/stunnel/certs.pem
;CAfile = /usr/share/ssl/certs/ca-bundle.crt
; Don't forget to c_rehash CRLpath
; CRLpath is located inside chroot jail
;CRLpath = /crls
; Alternatively you can use CRLfile
;CRLfile = /etc/stunnel/crls.pem
; Some debugging stuff useful for troubleshooting
;debug = 7
;output = stunnel.log
; Use it for client mode
;client = yes
; Service-level configuration
[pop3s]
accept = 995
connect = 110
[imaps]
accept = 993
connect = 143
[nntp]
accept = localhost:119
connect = yournewshost.com:563
[ssmtp]
accept = 465
connect = 25
;[https]
;accept = 443
;connect = 80
;TIMEOUTclose = 0
; vim:ft=dosini
Question #1 :
inetd a été remplacé par xinetd, est ce que ca va poser des problèmes ?
Question #2 :
Stunnel VS OpenSSL, qui est le meilleur ?
Question #3 :
j'ai ajouté le service nntp ci-dessus, est-ce correct ?
Question #4 :
Pour Samba,
j'ai lu sur le site de Stunnel que le manip est différente des autres sevices. Y a t-il un autre moyen plus simple ? Est ce que quelqu'un a créer un petit tutorial ?
