#SETTING UP STUNNEL HOW TO#

Edit or create the /etc/stunnel/nf file: cert = /etc/pki/tls/certs/stunnel.pem This example uses port 450 for tunneling telnet. Choose a port that is not already in use. Now itвЂ™s time to define the service and the ports to use for encrypting your connection. pem file, and copy that to the SSL certificate directory: cat stunnel.crt stunnel.key > stunnel.pem Merge the RSA key and SSL certificate into a single. Organizational Unit Name (eg, section) :Д¬ommon Name (eg, your name or your server's hostname) : If you enter '.', the field will be left blank. There are quite a few fields but you can leave some blankДЇor some fields there will be a default value, What you are about to enter is what is called a Distinguished Name or a DN.

Incorporated into your certificate request. You are about to be asked to enter information that will be When asked for Common Name you must enter the correct host name or IP address, but everything else you can skip through by hitting the Enter key. You will be prompted for the following information one line at a time. Openssl req -new -key stunnel.key -x509 -days 90 -out stunnel.crt Next, generate an RSA private key and an SSL certificate: openssl genrsa 2048 > stunnel.key Install stunnel along with the telnet server and client using sudo: sudo dnf -y install stunnel telnet-server telnetДЄdd a firewall rule, entering your password when prompted: firewall-cmd -add-service=telnet -perm

#SETTING UP STUNNEL HOW TO#

This article shows you how to use it, with telnet as an example. Stunnel is designed to add SSL encryption to programs that have insecure connection protocols. This is where stunnel comes to the rescue. However there are still legacy systems that need to use it. Telnet does not encrypt data and is considered insecure and passwords can be easily sniffed because data is sent in the clear. Telnet is a client-server protocol that connects to a remote server through TCP over port 23.

Setting up stunnel