#STUNNEL GITHUB INSTALL#

Now I can access my home network on the road with openvpn using HTTPS tunneling. You need to modify the OpenVPN client such that it connect to the stunnel client on localhost instead.ĪLL DONE. Output = /usr/local/etc/stunnel/stunnel.log

#STUNNEL GITHUB INSTALL#

Install Stunnel client brew install stunnelĬonfigure Stunnel client vi /usr/local/etc/stunnel/nf Install homebrew ( ) ruby -e “$(curl -fsSL )” Install and Configure Stunnel Client on Mac book 10.10.2 Now run the stunnel server service stunnel4 start Its architecture is optimized for security, portability, and scalability (including load-balancing), making it suitable for large deployments. Launch a web browser and enter the router administration console, perform the following tasksĪdd a port forwarding with TCP port 443, forward to the OpenVPN server with stunnel server installed.ĭestination IP Subnet Mask Gateway Interfaceġ92.168.33.0Ē55.255.255.0đ92.168.1.100 LAN Stunnel is a proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code. Run the following commands in sequence and as root sudo apt-get install stunnel4 mkdir /etc/ssl/certs/stunnel cd /etc/ssl/certs/stunnel openssl genrsa -out stunnel.key 2048 openssl req -new -x509 -key stunnel.key -out stunnel.crt -days 36500 cat stunnel.key stunnel.crt > /etc/stunnel/stunnel.pem vi /etc/stunnel/nfĬopy and paste the following to the new nf

OpenVPN server must use TCP instead of UDP!!įor OpenVPN client, assume Internet Network is using address 192.168.1.0/255.255.255.0, gateway 192.168.1.1 Not that hard to make my OpenVPN traffic looks like https traffic.Īssume OpenVPN server is using TCP port 1194.Īssume OpenVPN server is using virtual subnet 192.168.33.0/255.255.255.0Īssume OpenVPN server is using 192.168.1.100 as internal network IP Install and configure Stunnel client on machine running openvpn client Install and configure Stunnel server on machine running openvpn server

Stunnel github