is a Perl wrapper script to use stunnel 3.x syntax with stunnel >4.05.
#STUNNEL DEPENDENCIES INSTALL#
Has anyone achieved to get ECC ciphers working with cPanel's native ssl on CentOS ? Has anyone achieved to compile or install a functional stunnel version higher than the stock 4.29 ?Īny suggestion would be very appreciated. is a program designed to work as an SSL encryption wrapper between remote clients and local ( xinetd -startable) or remote servers. No errors are thrown during compilation/linking, and all dependencies seem to be satisfied.Īt this stage, we don't know where to investigate further. To our surprise, every custom compiled stunnel binary dies with an "out of memory" message after the first few ssl connections, regardless of the stunnel version (we attempted to compile 4.29, 4.53, 4.55 and 4.56). Stunnel can allow you to secure non-SSL aware daemons and\\ protocols (like POP, IMAP, LDAP, etc) by having Stunnel provide the\\ encryption, requiring no changes to the daemon's. We then compiled stunnel sources with the same settings as the vendor-supplied specs. Stunnel is a program that allows you to encrypt arbitrary TCP\\ connections inside SSL (Secure Sockets Layer) available on both Unix\\ and Windows.
There is also no source code we can study since cpsrvd-ssl seems to be distributed only in binary form.Īs a temporary replacement solution, we then attempted to use stunnel, and realised that version 4.29 as provided by default on CentOS 6.5 is also severely outdated, since the latest stunnel version is 4.56. However, the WHM service on port 2087 and the cPanel services on ports 20 don't take advantage of the new ciphers regardless of appropriate settings in the Cpanel Web Services Configuration cipher field.Īccording to our checks, upgrading some old SSL-related perl modules does not change cpsrvd-ssl behavior. We did not encounter any problem implementing FS in Apache and the web hosting. System: CENTOS 6.5 x86_64 in virtuozzo VPS, WHM 11.40.1 (build 9)Ĭentos 6.5 finally upgraded openssl to version 1.0.1e, offering the ability to use cipher suites allowing to implement Forward Secrecy in SSL connections.
0 kommentar(er)
