stunnel | Wrapping openvpn with stunnel | SSH Utils library

 by   Xaqron Shell Version: Current License: MIT

kandi X-RAY | stunnel Summary

kandi X-RAY | stunnel Summary

stunnel is a Shell library typically used in Utilities, SSH Utils applications. stunnel has no bugs, it has a Permissive License and it has low support. However stunnel has 11 vulnerabilities. You can download it from GitHub.

Hiding openvpn traffic with stunnel so DPI firewalls are less likely to block your traffic.
Support
    Quality
      Security
        License
          Reuse

            kandi-support Support

              stunnel has a low active ecosystem.
              It has 98 star(s) with 30 fork(s). There are 5 watchers for this library.
              OutlinedDot
              It had no major release in the last 6 months.
              There are 2 open issues and 1 have been closed. There are 1 open pull requests and 0 closed requests.
              It has a neutral sentiment in the developer community.
              The latest version of stunnel is current.

            kandi-Quality Quality

              stunnel has 0 bugs and 0 code smells.

            kandi-Security Security

              OutlinedDot
              stunnel has 11 vulnerability issues reported (0 critical, 5 high, 5 medium, 1 low).
              stunnel code analysis shows 0 unresolved vulnerabilities.
              There are 0 security hotspots that need review.

            kandi-License License

              stunnel is licensed under the MIT License. This license is Permissive.
              Permissive licenses have the least restrictions, and you can use them in most projects.

            kandi-Reuse Reuse

              stunnel releases are not available. You will need to build from source code and install.
              Installation instructions, examples and code snippets are available.

            Top functions reviewed by kandi - BETA

            kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
            Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of stunnel
            Get all kandi verified functions for this library.

            stunnel Key Features

            No Key Features are available at this moment for stunnel.

            stunnel Examples and Code Snippets

            No Code Snippets are available at this moment for stunnel.

            Community Discussions

            QUESTION

            How do I open a secure WSS websocket in KDB?
            Asked 2022-Jan-02 at 15:09

            I'm trying to figure out how to connect to a data feed.

            The data feed is at

            ...

            ANSWER

            Answered 2022-Jan-02 at 15:09

            Stunnel can be used to encrypt or decrypt any TCP SSL connection, including websockets.

            To get KDB to connect to a secure websocket, you need to use stunnel in client mode.

            This is the config that worked for me. You can then open the decrypted websocket on your localhost at ws://localhost:80

            Source https://stackoverflow.com/questions/70533879

            QUESTION

            Ensuring TLSv1.2 in stunnel?
            Asked 2021-Nov-01 at 08:44

            Please bear with me as I might lack some understanding on creating certificates to achieve a TLS connection.

            I am trying to establish a connection with TLSv1.2 encrypted from client to server. I have created my own CA certificate and CSR on client-side and proceeded to sign the client.

            On client side after generating CSR and signing it with the CA cert:

            • client-cert.pem
            • client-csr.pem
            • client-key.pem

            Commands used:

            • openssl req -nodes -newkey rsa:4096 -keyout client-key.pem -out client-csr.pem
            • openssl verify -CAfile ca-cert.pem client-cert.pem

            On server-side, i also created a CSR and signed it with my own CA:

            • server-cert.pem
            • server-key.pem

            On server-side, after I create the CA cert and sign the client cert:

            • ca-cert.pem
            • ca-cert.srl
            • ca-key.pem

            Commands used:

            • openssl req -x509 -newkey rsa:4096 -days 3650 -keyout ca-key.pem -out ca-cert.pem
            • openssl x509 -req -in server-req.pem -days 3650 -CA ca-cert.pem -CAkey ca-key.pem -CAcreateserial -out server-cert.pem
            • openssl verify -CAfile ca-cert.pem client-cert.pem

            So on my nginx side, I had configured it this way. (stream connection)

            ...

            ANSWER

            Answered 2021-Nov-01 at 08:44

            I'm not familiar with Nginx configuration, so I don't know if you got it right. But I can tell what you're doing wrong in your test. You've successfully tested that an unauthenticated client is not allowed to connect. OpenSSL errors aren't always clear, but in this case, the message from the server is reasonably clear:

            ssl3_get_client_certificate:peer did not return a certificate

            You've configured the server to require client authentication. But the client did not send a certificate, so no client authentication can happen, and the server refused the connection attempt by closing the connection. (TLS client authentication works this way: the client sends a certificate, then it sends a signature that proves that it knows the corresponding private key.) The error on the client is “connection reset by peer”.

            You need to pass the signed certificate and the private key to your client.

            Source https://stackoverflow.com/questions/69792460

            QUESTION

            Can I modify how select numbers its menu items?
            Asked 2021-Sep-23 at 17:09

            When I display a menu with select, tt displays something like this

            ...

            ANSWER

            Answered 2021-Sep-23 at 09:45

            Can I modify how select numbers its menu items?

            No. It is not possible to change it. It is hardcoded to ) . From https://github.com/bminor/bash/blob/master/execute_cmd.c#L3134 :

            Source https://stackoverflow.com/questions/69293354

            QUESTION

            How to wrap OpenVPN and HTTPS traffic in one TLS connection?
            Asked 2021-Jun-14 at 06:54

            I am trying to create a single TLS connection from a client to a server. Inside this tunnel, I would like to have two different types of streams: HTTPS traffic that I want the server to forward to a specific API server, and OpenVPN traffic(which is a combination of TLS and a TCP data stream). I am looking into WebSocket to do so, but can't find information on how to forward the stream to the correct destination (OpenVPN vs HTTPS API server) once it reaches my server. Is WebSocket a good solution for this? Is stunnel a better option? Are there existing solutions that offer this functionality?

            ...

            ANSWER

            Answered 2021-Jun-14 at 06:54

            I've ended up solving this using SSLH and ghostunnel: on the client, I have started a ghostunnel listening on 127.0.0.1:8443 and forwarding the TLS-wrapped traffic towards a ghostunnel server I have in the cloud (listening on 443). I have directed my OpenVPN client to connect to 127.0.0.1:8443. I have also directed my HTTPS client to connect to 127.0.0.1:8443. On the server side, the traffic coming out of the ghostunnel server is funnelled into an SSLH server which in turn has two rules: forward TLS traffic to my webserver, and OpenVPN towards my OpenVPN server. The solution works great!

            Source https://stackoverflow.com/questions/66949825

            QUESTION

            Script does not run correctly when executed from cron
            Asked 2021-Mar-26 at 12:08

            i have a problem with a script, when is executed from cron the script does not work as expected but when i execute it from ssh it runs as is supposed.

            Setup: QNAP NAS

            The script that i'm trying to run:

            ...

            ANSWER

            Answered 2021-Mar-26 at 12:08

            The fix to my issue was to set the full path to docker. e.g:

            Source https://stackoverflow.com/questions/66806715

            QUESTION

            QuickFix C++ and SSL: Issue connecting to LMAX using sTunnel
            Asked 2021-Feb-11 at 14:19
            Goal:

            Using sTunnel with QuickFix C++: To login to the LMAX UAT over SSL-internet and send FIX 4.2 messages over a TCP connection. Another similar SO question can be found here, but doesn't appear to solve this particular issue.

            OS: Ubuntu 19.10 | sTunnel version: 5.55 | Engine: quickfix-1.15.1 | Venue: LMAX [UAT-LD4]

            Problem:

            Cannot login to the UAT. After starting sTunnel and then running the client application which first sends a LOGON message, no authentication is received. LMAX have said the client server public IP addr has been whitelisted.

            *Configs found further below. When trying to login:

            ...

            ANSWER

            Answered 2021-Feb-11 at 14:19

            SOLUTION:

            It appeared that indeed the IP address (as helpfully noted by @Christoph John) had not been correctly whitelisted by the server-side.

            However, the problem persisted. In the sTunnel configuration, I had to change sslVersion = TLSv1.1 to sslVersion = TLSv1.2.

            As well as this, it appears that the UAT would not accept FIX 4.2 messages. After changing the protocol version to FIX 4.4, I could finally LOGON to the UAT.

            Source https://stackoverflow.com/questions/65969627

            QUESTION

            Replace SSL certificate in Apache vhosts-file using sed
            Asked 2021-Jan-07 at 22:28

            I have a cron job that runs dehydrated to renew Let's Encrypt certificates on my QNAP webserver.

            I want it to fetch the current vhosts file that is generated by QNAP, get the section for the actual site, and then replace that information with correct certificate data.

            Here is a section of the vhosts-file:

            ...

            ANSWER

            Answered 2021-Jan-07 at 14:56

            QUESTION

            django channels works locally but fails on server
            Asked 2020-Nov-21 at 15:06
            Django channels fails to connect in production

            i'm working on a chat application using django Channels and reconnecting-web-socket the app works fine locally but when deployed to heroku the site works fine but the web socket closes before connection is established and sometimes it works fine.

            it tries to connect and says websocket open and established

            ...

            ANSWER

            Answered 2020-Nov-21 at 15:06

            the problem was in reconnecting-web-socket.min.js changing

            Source https://stackoverflow.com/questions/64942970

            QUESTION

            How to install "stunnel" on CloudLinux RHEL Feddora CentOS yum install not working
            Asked 2020-Oct-27 at 19:32

            !!JUST WRITING THIS POST SO THAT SOMEONE CAN SAVE HOURS IN THIS!!

            I tried a hell lot to install this "stunnel" but was unable to do so I was in my cpanel's terminal

            What I tried all with 'sudo'

            ...

            ANSWER

            Answered 2020-Oct-27 at 19:32

            I searched everywhere but I didn't find it so I tried it myself and it worked Hope this may help others who are stuck with this in their cpanel RHEL FEDDORA CENTOS

            What I did is this: Open Terminal from Cpanel and run this

            Source https://stackoverflow.com/questions/64561639

            QUESTION

            docker run behavior with commands in different order
            Asked 2020-Sep-16 at 19:51

            I'm trying to figure out the way docker handles commands presented to it.

            For example if I run this the JS app starts fine.

            ...

            ANSWER

            Answered 2020-Sep-16 at 19:51

            Either && or ; between command, shell will execute in order. So, the first command needs to finish first and then the subsequent command run.

            BUT you call nginx -g 'daemon off;' will make it run in the foreground. Therefore, it is never finished running. The commands follows won't run.

            However, I am still not sure why stunnel; nginx; cd /video_recordings/voddirectory; pm2 start app.js; pm2 startup; does not run as the normal behaviour of Nginx should go background.

            Source https://stackoverflow.com/questions/63926648

            Community Discussions, Code Snippets contain sources that include Stack Exchange Network

            Vulnerabilities

            No vulnerabilities reported

            Install stunnel

            You can run the script stunnel.sh provided by this tutorial like:. download stunnel.pem from your home directory after installation got completed. Now step two is configuring client side.
            You should have a client.ovpn config file or something similar for connecting to openvpn server. Edit this file and add the following lins at the begining:. Replace server_ip with your server public IP address.
            You should have a client.ovpn config file or something similar for connecting to openvpn server. Edit this file and add the following lins at the begining:. Replace server_ip with your server public IP address.
            Download and install latest Windows stunnel client. Currently only 32-bit version is privoded and this is the latest release by the time of writing this tutorial.

            Support

            For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .
            Find more information at:

            Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items

            Find more libraries
            CLONE
          • HTTPS

            https://github.com/Xaqron/stunnel.git

          • CLI

            gh repo clone Xaqron/stunnel

          • sshUrl

            git@github.com:Xaqron/stunnel.git

          • Stay Updated

            Subscribe to our newsletter for trending solutions and developer bootcamps

            Agree to Sign up and Terms & Conditions

            Share this Page

            share link

            Explore Related Topics

            Consider Popular SSH Utils Libraries

            openssl

            by openssl

            solid

            by solid

            Bastillion

            by bastillion-io

            sekey

            by sekey

            sshj

            by hierynomus

            Try Top Libraries by Xaqron

            tor-private-bridge

            by XaqronShell

            twitter-follow-unfollow-bot

            by XaqronJavaScript

            openvpn

            by XaqronShell

            ckc

            by XaqronJavaScript

            kcn

            by XaqronJavaScript