Stunnel/Mac - Revision history

Admin: /* Start Stunnel */

2016-02-03T01:57:04Z

Start Stunnel

← Older revision		Revision as of 01:57, 3 February 2016
Line 62:		Line 62:

	but either way, when you run the stunnel command to start stunnel, it will not print out anything.		but either way, when you run the stunnel command to start stunnel, it will not print out anything.

			==SSH Away==

			<pre>
			ssh -p 443 user@localhost
			</pre>

			This will forward your local port 443 connection to stunnel, which will then forward it to the remote computer's port 443. The stunnel on the remote machine's end will receive the traffic on port 443, and then reroute it to the remote machine's own port 22.



	[[Category:Stunnel]]		[[Category:Stunnel]]

Admin: /* Port Forward */

2016-02-03T01:55:33Z

Port Forward

← Older revision		Revision as of 01:55, 3 February 2016
Line 50:		Line 50:

	Open System Preferences > Security > Firewall. You can open the firewall completely or on specific ports.		Open System Preferences > Security > Firewall. You can open the firewall completely or on specific ports.

			=Start Stunnel=

			On the Mac, stunnel's behavior is a bit cryptic. Check the log file, in <code>/var/log/stunnel4/stunnel.log</code>, for any messages. If that directory does not exist, make it.

			The log file will tell you if anything goes wrong, or if stunnel has started ok. You can check if it is running with the ps command:

			<pre>
			$ ps auxw \| grep stunnel
			</pre>

			but either way, when you run the stunnel command to start stunnel, it will not print out anything.


	[[Category:Stunnel]]		[[Category:Stunnel]]

Admin: /* Port Forward */

2016-02-03T01:29:31Z

Port Forward

← Older revision		Revision as of 01:29, 3 February 2016
Line 49:		Line 49:
	Now that you have the command and control server's certificate, you have to open your client firewall to outgoing SSL connections.		Now that you have the command and control server's certificate, you have to open your client firewall to outgoing SSL connections.

			Open System Preferences > Security > Firewall. You can open the firewall completely or on specific ports.







	[[Category:Stunnel]]		[[Category:Stunnel]]

Admin: /* Copy Private Key from Command and Control */

2016-02-03T01:28:46Z

Copy Private Key from Command and Control

← Older revision		Revision as of 01:28, 3 February 2016
Line 43:		Line 43:
	Get the private key from the command and control server to the client machine, either using scp (over a potentially untrusted/observed/man-in-the-middle'd connection, so be wary) or using a higher verification level (more here: [http://comments.gmane.org/gmane.network.stunnel.user/6388]).		Get the private key from the command and control server to the client machine, either using scp (over a potentially untrusted/observed/man-in-the-middle'd connection, so be wary) or using a higher verification level (more here: [http://comments.gmane.org/gmane.network.stunnel.user/6388]).

	This will go in your		This will go in your stunnel etc folder, <code>/usr/local/etc/stunnel/stunnel.pem</code>.

	==Port Forward==		==Port Forward==

Admin at 01:28, 3 February 2016

2016-02-03T01:28:13Z

@@ Line 1: / Line 1: @@
 Building stunnel on a mac:
 Get stunnel download from here:
 https://www.stunnel.org/downloads.html
 Verify downloaded thing with <pre>openssl dgst -sha256 stunnel-5.30.tar.gz</pre>
@@ Line 10: / Line 16: @@
 ./configure && make && sudo make install
 </pre>
 Now make certificate:
@@ Line 16: / Line 24: @@
 $ sudo make cert
 </pre>
 [[Category:Stunnel]]

Admin at 06:21, 2 February 2016

2016-02-02T06:21:53Z

← Older revision		Revision as of 06:21, 2 February 2016
Line 18:		Line 18:


			[[Category:Stunnel]]
	~~{{StunnelFlag}}~~

Admin at 05:42, 2 February 2016

2016-02-02T05:42:00Z

← Older revision		Revision as of 05:42, 2 February 2016
Line 16:		Line 16:
	$ sudo make cert		$ sudo make cert
	</pre>		</pre>



			{{StunnelFlag}}

Admin at 05:41, 2 February 2016

2016-02-02T05:41:14Z

← Older revision		Revision as of 05:41, 2 February 2016
Line 9:		Line 9:
	<pre>		<pre>
	./configure && make && sudo make install		./configure && make && sudo make install
			</pre>

			Now make certificate:

			<pre>
			$ sudo make cert
	</pre>		</pre>

Admin: Created page with "Building stunnel on a mac: Get stunnel download from here: https://www.stunnel.org/downloads.html Verify downloaded thing with

openssl dgst -sha256 stunnel-5.30.tar.gz..."

2016-02-02T05:40:20Z

Created page with "Building stunnel on a mac: Get stunnel download from here: https://www.stunnel.org/downloads.html Verify downloaded thing with <pre>openssl dgst -sha256 stunnel-5.30.tar.gz..."

New page

Building stunnel on a mac:

Get stunnel download from here:

https://www.stunnel.org/downloads.html

Verify downloaded thing with <pre>openssl dgst -sha256 stunnel-5.30.tar.gz</pre>

<pre>
./configure && make && sudo make install
</pre>