Advertisement
Guest User

cesurasean

a guest
Oct 23rd, 2011
247
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.03 KB | None | 0 0
  1. when i run this;
  2.  
  3. openssl req -new -x509 -days 365 -nodes -config /etc/stunnel/stunnel.conf -out /etc/stunnel/stunnel.pem -keyout /etc/stunnel/stunnel.pem
  4.  
  5.  
  6. im getting this;
  7.  
  8. error on line 1 of /etc/stunnel/stunnel.conf
  9. 21987:error:0E079065:configuration file routines:DEF_LOAD_BIO:missing equal sign:conf_def.c:366:line 1
  10.  
  11.  
  12. stunnel.conf looks like this;
  13.  
  14.  
  15. ; Sample stunnel configuration file by Michal Trojnara 2002-2009
  16. ;
  17. ; some options used here may not be adequate for your particular configuration
  18. ; please read the manual and make sure you understand them
  19.  
  20. ; certificate/key is needed in server mode and optional in client mode
  21. cert = /usr/local/etc/stunnel/mail.pem
  22. ;key = /usr/local/etc/stunnel/mail.pem
  23.  
  24. ; protocol version (all, SSLv2, SSLv3, TLSv1)
  25. sslVersion = SSLv3
  26.  
  27. ; security enhancements for UNIX systems - comment them out on Win32
  28. ; for chroot a copy of some devices and files is needed within the jail
  29. chroot = /usr/local/var/lib/stunnel/
  30. setuid = nobody
  31. setgid = nogroup
  32. ; PID is created inside the chroot jail
  33. pid = /stunnel.pid
  34.  
  35. ; performance tunings
  36. socket = l:TCP_NODELAY=1
  37. socket = r:TCP_NODELAY=1
  38. ;compression = zlib
  39.  
  40. ; workaround for Eudora bug
  41. ;options = DONT_INSERT_EMPTY_FRAGMENTS
  42.  
  43. ; authentication stuff needs to be configured to prevent MITM attacks
  44. ; it is not enabled by default!
  45. ;verify = 2
  46. ; don't forget to c_rehash CApath
  47. ; CApath is located inside chroot jail
  48. ;CApath = /certs
  49. ; it's often easier to use CAfile
  50. ;CAfile = /usr/local/etc/stunnel/certs.pem
  51. ; don't forget to c_rehash CRLpath
  52. ; CRLpath is located inside chroot jail
  53. ;CRLpath = /crls
  54. ; alternatively CRLfile can be used
  55. ;CRLfile = /usr/local/etc/stunnel/crls.pem
  56.  
  57. ; debugging stuff (may useful for troubleshooting)
  58. ;debug = 7
  59. ;output = stunnel.log
  60.  
  61. ; SSL client mode
  62. ;client = yes
  63.  
  64. ; service-level configuration
  65.  
  66. [pop3s]
  67. accept = 995
  68. connect = 110
  69.  
  70. [imaps]
  71. accept = 993
  72. connect = 143
  73.  
  74. [ssmtp]
  75. accept = 465
  76. connect = 25
  77.  
  78. ;[https]
  79. ;accept = 443
  80. ;connect = 80
  81. ;TIMEOUTclose = 0
  82.  
  83. ; vim:ft=dosini
  84.  
  85.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement