Agregar SSL / TLS a cualquier servicio de forma facil
Un linux
apt-get install stunnel
Hay un ejemplo en /usr/share/doc/stunnel4/examples/stunnel.conf-sample
; Entunelar NG_Sockets
[ng_sockets]
accept = 3006
connect = 3005
cert = /etc/ssl/certs/ssl-cert-snakeoil.pem
key = /etc/ssl/private/ssl-cert-snakeoil.key
; vim:ft=dosini
OJO: Use los mismos certificados de su Apache
systemctl enable stunnel4
systemctl start stunnel4
No olvide abrir el forewall
firewall-cmd –zone=external –permanent –add-port=3006/tcp
firewall-cmd –reload
/etc/monit/conf-available/stunnel
check process stunnel with pidfile /var/run/stunnel4.pid
start program = “/etc/init.d/stunnel4 start”
stop program = “/etc/init.d/stunnel4 stop”
if failed host 127.0.0.1 port 3006 type TCPSSL protocol HTTP then restart
group stunnel
depends stunnel_rc
depends stunnel_bin
check file stunnel_bin with path /usr/bin/stunnel
group stunnel
if failed checksum then unmonitor
if failed permission 755 then unmonitor
if failed uid root then unmonitor
if failed gid root then unmonitor
check file stunnel_rc with path /etc/init.d/stunnel4
group stunnel
if failed checksum then unmonitor
if failed permission 755 then unmonitor
if failed uid root then unmonitor
if failed gid root then unmonitor
-
-
FIN
Advertencia
Este documento es privado y es de u so exclusivo de sus autores y de SKINA TECH. Cualquier uso sin una autorización escrita es contra la ley de derechos de autor y de propiedad intelectual, y será motivo de una acción legal.
15-Marzo-2006 J.E.Gomez v1.0 Primera version