#STUNNEL FOR MAC OS MAC OS X#
#STUNNEL FOR MAC OS CRACKER#
#STUNNEL FOR MAC OS PATCH#
#STUNNEL FOR MAC OS FULL#
#STUNNEL FOR MAC OS LICENSE#

The top certificate ('Starfield Secure Certification Authority') is signed by an issuer named 'Starfield Class 2 Certification Authority' with a thumbprint starting with ad7e1c28. that certificate bundle's chain is three-deep, but the trust chain looks two-deep. One further tidbit the openssl s_client command is very useful for testing certificate chain issues and checking how your service is presenting its certificates.Įdit: Ok.

#STUNNEL FOR MAC OS FULL#

This will force stunnel to present the full certificate chain to clients. (root certificate here copy-paste the bottom chunk from the bundle) (intermediate certificate here copy-paste the top chunk from the bundle) (certificate from asana.pem file pasted here) You'll want to save a backup copy of that file, then make a new one basically combining the two files, formatted like this: -BEGIN CERTIFICATE. Instead, you want to craft the file in the cert option to contain the entire applicable certificate chain.

#STUNNEL FOR MAC OS PATCH#

Patch Stunnel to support web proxies (squid, etc.The CAFile option configures a CA to use for client authentication certificates this isn't what you want. Use stunnel through a https proxy that supports the CONNECT protocol. Select SSL method (ssl2/ssl3/tls) from the command lineĪdds '-n nntp' negotiation option to Stunnel.Īdds '-n pop' negotiation option to Stunnel.ĭelay dns lookups until connect time (run-time option)Įnable bandwidth-limiting options to StunnelĮnable per-connection bandwidth limiting options to Stunnel Similar functionality introduced into stunnel-3.15Īllow Stunnel to read from stdin and write to stdout New -O option to discard (rather than inline) OOB data.Īdd an X-Forwarded-For header for HTTP connections. Similar functionality introduced into Stunnel-3.19

#STUNNEL FOR MAC OS MAC OS X#

Writes connection details for current tunnel to filesystemĪbility to turn on/off the tray icon in Stunnel 4.x on WindowsĪllow compilation on Mac OS X and Darwin.įorce Stunnel to open and close the log each time it sends a message to avoid a bug in Digital Unix 4.0d (and perhaps others)įix for format bug in pop/smtp negotiation to VersionĪllow you to specify the remote host in an env var, not on command line Patch for fork model (SIGCHLD, syslog, reaping, etc) Non-SSL passthrough for negotiated protocols, immediate chroot/setuid options, use open file descriptor instead of new remote socket or local program, and more.ĭistributed session caching with distcache You do not need this if you use Stunnel 4.05 or later, or OpenSSL-0.9.7b or later or OpenSSL-0.9.6j or later.Ĭheck peer's certificate purpose (client, server, smime, etc)

#STUNNEL FOR MAC OS CRACKER#

It forces RSA blinding, which can defeat a recently discovered timing attack that could allow a cracker to brute force your private RSA keys. This is a patch to OpenSSL versions 0.9.7a and earlier, and 0.9.6i and earlier. (Patch file is really a zip file, rename appropriately.) Work around a bug in some systems (Solaris?) that have trouble with descriptors greater than 255.Įnables you to compile with Microsoft Visual C++ 6 natively. Patch to replace calls to select with poll Patch updated to fix bug where blinding attempted even in client mode with no cert. Not needed if you have recent versions (later than 0.9.6j or 0.9.7b) of OpenSSL. Patch fixed on Apr 23, 2003, to not turn on blinding in client mode when no cert in use.įorces RSA blinding to prevent timing attacks which can determine an RSA private key. Contact the authors if you have anyĪllow config file on stdin or any arbitrary file descriptorĭetermine tunnel endpoint dynamically via LDAP lookups They could be work perfectly, or totally foul upĮverything. However it does not endorse any of the patchesĬontained herein. This website makes patches available for use by the

#STUNNEL FOR MAC OS LICENSE#

You are welcome to submit patches with alternate licenses, however you mustĮxplicitly say so when submitting them to the mailing list or maintainers.Īny patch that is submitted without an acompanying license will be assumed

Original BSD and GNU patches are not for example. This means revised BSD patches are likelyĪcceptable. Only patches released into the public domain stand a chance of getting How do I get a patch included into the release versions of Stunnel? You are welcome to submit them directly to the

If you wish to submit a patch, please retrieve the latest version Below you will find various patches submitted by users. Sometimes these make it into the next version of the software, sometimes At various times folks release patches to the current version of Stunnel.

Stunnel for mac os