Instruct Puppet to install it anywhere you like. pem file in the Files directory of your Puppet module.
#UBUNTU TEST STUNNEL CONNECTION HOW TO#
How To Use Puppet To Install A Certificate File Openssl req -new -x509 -key key.pem -out cert.pem -days 1095Įmail Address: key.pem cert.pem > stunnel.pem Here is an example: openssl genrsa -out key.pem 2048 This can be done using the shell openssl command In order to create a tunnel using stunnel, you must first create a digitalĬertificate. This makes it more robust than a manually-created SSH tunnel. Stunnel is a system service that is automatically re-established if the tunnel softwareĬrashes. Split onto two computers, a TCP client and server that are currently working on a singleĬomputer, without having to reconfigure either the client or the server. That is present on one computer appears on the other computer. stunnelĪlso allows you to create a secure tunnel between two different computers so that a TCP service Service, re-presenting the service on a different TCP port, but wrapped in SSL. Stunnel is software that enables you to add an SSL (Secure Sockets Layer) to an existing TCP Other than the above tweaks being incorporated all credit goes to Aaron Russo. There has been no update to the original module for several years and it required the outstanding commit from Michael Weiser - michaelweiser:dac-override ( ) and the SELinux context of the LOGDIR to be changed to: var_log_t. stunnel cannot check the certificate of the other side because the configured CA does not match the one which signed the certificate. This is a fork of the stunnel module originally written by Aaron Russo: 'tlsv1 alert unknown ca' sounds pretty clear to me. This is an stunnel module that provides support for multiple tunnels, each with
0 kommentar(er)
