Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Does Stunnel support non-encrypt connection?

1 question about Stunnel. I would like to use Stunnel as a FIX (Financial Information eXchange) gateway for internet, to support both SSL and non-SSL connection. Is Stunnel able to do without any encryption? I just had a try with plain socket but it looked Stunnel rejected the connection saying 'invalid protocol' or something.

like image 963
user462872 Avatar asked Aug 31 '12 10:08

user462872


People also ask

What is stunnel encryption?

stunnel (“Secure Tunnel”) is a. cross-platform application used to provide a universal TLS/SSL tunneling service. It is a sort of proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code.

What is a stunnel used for?

Stunnel is an open-source multi-platform application used to provide a universal TLS/SSL tunneling service. Stunnel can be used to provide secure encrypted connections for clients or servers that do not speak TLS or SSL natively.

What is stunnel proxy?

Stunnel is a proxy designed to add SSL/TLS encryption functionality to existing client and server applications without any changes to application code. Stunnel is optimized for security and scalability, making it well-suited for large numbers of concurrent connections.

What is stunnel Linux?

DESCRIPTION. The stunnel program is designed to work as SSL encryption wrapper between remote clients and local (inetd-startable) or remote servers. The concept is that having non-SSL aware daemons running on your system you can easily set them up to communicate with clients over secure SSL channels.


1 Answers

It's possible to use SSL/TLS without encryption using cipher suites with null encryption (e.g. TLS_RSA_WITH_NULL_SHA), which are normally disabled by default, but could be set via the ciphers option of Stunnel. However, you would still be using SSL/TLS, which isn't what you seem to be looking for.

It looks like you're more generally looking for what's usually called a TCP bouncer. You should be able to find a number of implementations around.

like image 129
Bruno Avatar answered Sep 29 '22 12:09

Bruno