30 lines
1 KiB
Text
30 lines
1 KiB
Text
|
; **************************************************************************
|
||
|
|
; * Global options *
|
||
|
|
; **************************************************************************
|
||
|
|
|
||
|
|
; Debugging stuff (may useful for troubleshooting)
|
||
|
|
debug = 7
|
||
|
|
; output = stunnel.log
|
||
|
|
|
||
|
|
; PID is created inside the chroot jail
|
||
|
|
pid =
|
||
|
|
|
||
|
|
; **************************************************************************
|
||
|
|
; * Service defaults may also be specified in individual service sections *
|
||
|
|
; **************************************************************************
|
||
|
|
|
||
|
|
; Certificate/key is needed in server mode and optional in client mode
|
||
|
|
cert = /tmp/mail.pem
|
||
|
|
|
||
|
|
; force stunnel to use TLSv1.2 only
|
||
|
|
sslVersion = TLSv1.2
|
||
|
|
ciphers=HIGH
|
||
|
|
|
||
|
|
; Disable support for insecure SSLv3 protocol
|
||
|
|
options = NO_SSLv3
|
||
|
|
|
||
|
|
; **************************************************************************
|
||
|
|
; * Service definitions (remove all services for inetd mode) *
|
||
|
|
; **************************************************************************
|
||
|
|
|