Original release 20160328

[fex.git] / doc / SSL

diff --git a/doc/SSL b/doc/SSL
index fccd4488f0298e34c4883b9f1f8f11b0d45d88f6..6eb73bf60c1c9dbf8d349e33b1ec41d88901619f 100644 (file)
--- a/doc/SSL
+++ b/doc/SSL
@@ -2,6 +2,9 @@
 
 # execute this as root!
 
+# Redhat : stunnel-4 does not work! you need to install stunnel-5
+# Debian : stunnel-5.06 does not work! you need to install stunnel-5.18
+
 mkdir /home/fex/etc
 cd /home/fex/etc/
 
@@ -12,6 +15,8 @@ openssl x509 -text -in stunnel.pem
 chmod 600 stunnel.pem
 
 cat <<EOD>stunnel.conf
+debug = warning
+output = /home/fex/spool/stunnel.log
 cert = /home/fex/etc/stunnel.pem
 sslVersion = all
 TIMEOUTclose = 1
@@ -19,7 +24,7 @@ exec = perl
 execargs = perl -T /home/fex/bin/fexsrv stunnel
 EOD
 
-case $(lsb_release -a 2>/dev/null) in 
+case $(lsb_release -a 2>/dev/null) in
   *CentOS*) echo 'fips = no' >>stunnel.conf;;
 esac
 
@@ -41,7 +46,7 @@ service fexs
         type            = unlisted
         protocol        = tcp
         port            = 443
-        cps             = 5 10
+        cps             = 10 2
         user            = fex
         groups          = yes
         server          = $stunnel