Update CRL in stunnel?


 
Thread Tools Search this Thread
Special Forums UNIX and Linux Applications Update CRL in stunnel?
# 1  
Old 12-15-2011
Update CRL in stunnel?

Hi,
Does anyone know if there is a way to update CRLs in stunnel, without restarting stunnel? If I copy a new CRL to my CRLPath, it is only used for services (from config file) that hasn't been used yet. Services that has been used at least once does not care about new CRLs...
Login or Register to Ask a Question

Previous Thread | Next Thread

4 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Stunnel as non root !!

HI I'm trying to install stunnel as(or in) non-root user. there are these options setuid and setgid in stunnel.conf ,that by default are "nobody". but u can change them to "user" .. to enable stunnel in non root mode I tried doing it but no luck. Please drop in your valuable suggestions ... (2 Replies)
Discussion started by: leghorn
2 Replies

2. UNIX for Advanced & Expert Users

Help with Getting Stunnel Running

OS: Sun Solaris 10 (5.10) Stunnel has been installed but when I try to run it, I get a directory permission error. Not sure what it means by 'Not owner' even though that's plain English. I have changed the chroot to a directory (var/tmp) that I'm sure all users have access to so not sure... (0 Replies)
Discussion started by: neapolitan
0 Replies

3. SCO

Starting up stunnel on SCO Openserver 5.0.7

Hi there I have compiled a binary of stunnel for SCO Openserver 5.0.7 At the moment the binary is in /u/testroom/sbin/stunnel as root I cd to /u/testroom/sbin and start the stunnel daemon up with ./stunnel The stunnel log shows when users successfully connect or disconnect, so... (1 Reply)
Discussion started by: The_Librarian
1 Replies

4. UNIX for Advanced & Expert Users

stunnel will not start

am tring to start stunnel version 4.05 that come standard with Suse Enterprise 9 CD. I intend to start stunnel as a daemon, I have generate and self signed the certificate using openssl with openssl version 0.9.7d but stunnel will not start up instead I received the following error message ... (1 Reply)
Discussion started by: hassan1
1 Replies
Login or Register to Ask a Question
micro-httpd(8)							   User Commands						    micro-httpd(8)

NAME
micro-httpd - really small HTTP server SYNOPSIS
micro-httpd DIRECTORY OPTIONS
None. DESCRIPTION
micro-httpd is a very small HTTP server all in 150 lines of code. It runs from inetd, which means its performance is poor. But for low- traffic sites, it is quite adequate. It implements all the basic features of an HTTP server, including: * Security against ".." filename snooping. * The common MIME types. * Trailing-slash redirection. * index.html * Directory listings. To install it, add a line like this to /etc/inetd.conf: micro-http stream tcp nowait nobody /usr/sbin/micro-httpd micro-httpd dir Make sure the path to the executable is correct, and change "dir" to be the directory you want to serve. You could add line like this to /etc/services: micro-http port/tcp #Micro HTTP server Change "port" to the port number you want to use: 80, 8000, whatever. Restart inetd by sending it a "HUP" signal. On some systems, inetd has a maximum spawn rate - if you try to run inetd services faster than a certain number of times per minute, it assumed there is either a bug of an attack going on and it shuts down for a few minutes. If you run into this problem - look for syslog messages about too-rapid looping - you will need to find out how to increase the limit. Unfortunately this varies from OS to OS. On FreeBSD, you add a "-R 10000" flag to inetd's initial command line. On some Linux systems, you can set the limit on a per-service basis in inetd.conf, by changing "nowait" to "nowait.10000". Note that you can use micro-httpd to serve HTTPS, if you like, by running it from stunnel. First fetch and install stunnel - FreeBSD users can just go to /usr/ports/security/stunnel and do a "make cert ; make install". Then as root run: stunnel -p /usr/local/certs/stunnel.pem -d 443 -l /usr/sbin/micro-httpd -- micro-httpd dir Make sure the paths to the certificate and executable are correct, and again don not forget to change "dir" to the directory you want to serve. ENVIRONMENT
None. FILES
None. SEE ALSO
inetd(8) micro-inetd(8) xinetd(8) AUTHORS
Copyright (C) 1999 Jef Poskanzer <jef@mail.acme.com>. All rights reserved. This manual page was updated by Jari Aalto <jari.aalto@cante.net>. Released under license GNU GPL v2 or (at your option) any later version. For more information about license, visit <http://www.gnu.org/copyleft/gpl.html>. micro-httpd 2012-04-03 micro-httpd(8)