X-Git-Url: http://git.treefish.org/fex.git/blobdiff_plain/7fa382617fbaccc0ce522b2b3adbbee9db5ad227..20160328:/doc/SSL?ds=inline diff --git a/doc/SSL b/doc/SSL index fccd448..6eb73bf 100644 --- a/doc/SSL +++ b/doc/SSL @@ -2,6 +2,9 @@ # execute this as root! +# Redhat : stunnel-4 does not work! you need to install stunnel-5 +# Debian : stunnel-5.06 does not work! you need to install stunnel-5.18 + mkdir /home/fex/etc cd /home/fex/etc/ @@ -12,6 +15,8 @@ openssl x509 -text -in stunnel.pem chmod 600 stunnel.pem cat <stunnel.conf +debug = warning +output = /home/fex/spool/stunnel.log cert = /home/fex/etc/stunnel.pem sslVersion = all TIMEOUTclose = 1 @@ -19,7 +24,7 @@ exec = perl execargs = perl -T /home/fex/bin/fexsrv stunnel EOD -case $(lsb_release -a 2>/dev/null) in +case $(lsb_release -a 2>/dev/null) in *CentOS*) echo 'fips = no' >>stunnel.conf;; esac @@ -41,7 +46,7 @@ service fexs type = unlisted protocol = tcp port = 443 - cps = 5 10 + cps = 10 2 user = fex groups = yes server = $stunnel