Mastering Linux Security and Hardening - Second Edition

Creating a stunnel connection on Ubuntu – server side

For this, use an Ubuntu 18.04 VM:

1. Install stunnel:

sudo apt install stunnel

1. In the /etc/stunnel directory, create the stunnel.conf file with the following contents:

cert=/etc/stunnel/stunnel.pemfips=no[hear from client]accept=30000connect=6514

3. While still in the /etc/stunnel directory, create the stunnel.pem certificate:

sudo openssl req -new -x509 -days 3650 -nodes -out stunnel.pem -keyout stunnel.pem

4. Start the stunnel daemon:

sudo /etc/init.d/stunnel4 start

5. To make it automatically start when you reboot the system, edit the /etc/default/stunnel4 file. Look for this line:

ENABLED=0

Change it to this:

ENABLED=1

6. In the /etc/rsyslog.conf file, look for this line at the top: