Original release 20160328

[fex.git] / doc / SSL

diff --git a/doc/SSL b/doc/SSL
index d0e95f62f6a4e039d4c976182078fce03c1d532a..6eb73bf60c1c9dbf8d349e33b1ec41d88901619f 100644 (file)
--- a/doc/SSL
+++ b/doc/SSL
@@ -3,6 +3,7 @@
 # execute this as root!
 
 # Redhat : stunnel-4 does not work! you need to install stunnel-5
+# Debian : stunnel-5.06 does not work! you need to install stunnel-5.18
 
 mkdir /home/fex/etc
 cd /home/fex/etc/
@@ -14,6 +15,8 @@ openssl x509 -text -in stunnel.pem
 chmod 600 stunnel.pem
 
 cat <<EOD>stunnel.conf
+debug = warning
+output = /home/fex/spool/stunnel.log
 cert = /home/fex/etc/stunnel.pem
 sslVersion = all
 TIMEOUTclose = 1
@@ -21,7 +24,7 @@ exec = perl
 execargs = perl -T /home/fex/bin/fexsrv stunnel
 EOD
 
-case $(lsb_release -a 2>/dev/null) in 
+case $(lsb_release -a 2>/dev/null) in
   *CentOS*) echo 'fips = no' >>stunnel.conf;;
 esac
 
@@ -43,7 +46,7 @@ service fexs
         type            = unlisted
         protocol        = tcp
         port            = 443
-        cps             = 5 10
+        cps             = 10 2
         user            = fex
         groups          = yes
         server          = $stunnel