Mercurial > docs > diploma

annotate docs/openssl-stunnel.txt @ 409:ca763bd8c809 default tip

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Added tag final version which I handed in for changeset ee7211546c02
author meillo@marmaro.de
date Wed, 11 Feb 2009 08:55:32 +0100
parents 3a53d073f593
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
179
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
1
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
2 ch /usr/share/ssl/misc
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
3
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
4 create new CA:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
5 \begin{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
6 CA.pl -newca
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
7 country: DE
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
8 state: schwaben
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
9 city: Ulm
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
10 company:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
11 section:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
12 name:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
13 emailaddress:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
14 \end{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
15
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
16 generate ssl key:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
17 \begin{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
18 CA.pl -newreq
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
19 ... the same questions
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
20 \end{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
21
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
22 sign request with CA:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
23 \begin{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
24 CA.pl -sign
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
25 \end{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
26
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
27 remove passphrase from private key:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
28 \begin{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
29 openssl rsa <newreq.pem >key.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
30 (to be used by programs automaticly)
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
31 \end{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
32
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
33 secure:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
34 \begin{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
35 chmod 400 *.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
36 cp newcert.pem /etc/postfix/cert.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
37 cp key.pem /etc/postfix/key.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
38 cp demoCA/cacert.pem /etc/postfix/CAcert.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
39 chmode 400 /etc/postfix/*.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
40
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
41 mkdir /etc/stunnel
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
42 cat newcert.pem key.pem >/etc/stunnel/stunnel.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
43 chmod 400 /etc/stunnel/stunnel.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
44 (check /etc/stunnel with `stunnel -V')
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
45 \end{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
46
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
47
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
48 set up stunnels for POP, etc:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
49 \begin{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
50 nmap localhost
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
51 stunnel -d pop3s -r localhost:pop3 -p /etc/stunnel/stunnel.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
52 stunnel -d imaps -r localhost:imap -p /etc/stunnel/stunnel.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
53 nmap localhost
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
54 pop3s 995
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
55 imaps 993
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
56 \end{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
57
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
58 do not use stunnel wit SMTP:
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
59 because all incoming mail would be from 127.0.0.1 !!
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
60 use STARTTLS instead
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
61
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
62 postfix: main.cf
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
63 \begin{verbatim}
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
64 smtpd_use_tls = yes
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
65 smtpd_tls_received_header = no (does not log in received headers)
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
66
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
67 smtpd_tls_key_file = /etc/postfix/key.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
68 smtpd_tls_cert_file = /etc/postfix/cert.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
69 smtpd_tls_CA_file = /etc/postfix/CAcert.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
70
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
71 smtp_use_tls = yes (use TLS for sending)
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
72 smtp_tls_key_file = /etc/postfix/key.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
73 smtp_tls_cert_file = /etc/postfix/cert.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
74 smtp_tls_CA_file = /etc/postfix/CAcert.pem
7596cdcfbc1e tutorial how to use stunnel
meillo@marmaro.de
parents:
diff changeset
75 \end{verbatim}
279
3a53d073f593 added a small note
meillo@marmaro.de
parents: 179
diff changeset
76
3a53d073f593 added a small note
meillo@marmaro.de
parents: 179
diff changeset
77
3a53d073f593 added a small note
meillo@marmaro.de
parents: 179
diff changeset
78
3a53d073f593 added a small note
meillo@marmaro.de
parents: 179
diff changeset
79
3a53d073f593 added a small note
meillo@marmaro.de
parents: 179
diff changeset
80
3a53d073f593 added a small note
meillo@marmaro.de
parents: 179
diff changeset
81 stunnel:
3a53d073f593 added a small note
meillo@marmaro.de
parents: 179
diff changeset
82 $ stunnel -f -p stunnel.pem -l /path/to/smtpd