Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #257533 > unrolled thread

Re: Starting stunnel with systemd.

Started bypeter@easthope.ca
First post2023-04-24 16:50 +0200
Last post2023-04-25 15:20 +0200
Articles 2 — 2 participants

Back to article view | Back to linux.debian.user


Contents

  Re: Starting stunnel with systemd. peter@easthope.ca - 2023-04-24 16:50 +0200
    Re: Starting stunnel with systemd. David Wright <deblis@lionunicorn.co.uk> - 2023-04-25 15:20 +0200

#257533 — Re: Starting stunnel with systemd.

Frompeter@easthope.ca
Date2023-04-24 16:50 +0200
SubjectRe: Starting stunnel with systemd.
Message-ID<Go5FT-4cVW-1@gated-at.bofh.it>
In-reply-to: <0a2de6ba-15a9-0b01-50f1-b75ad750f176@darac.org.uk>
References: <897c4593eca5f214cddd3d8af000cd51@easthope.ca> 
<0a2de6ba-15a9-0b01-50f1-b75ad750f176@darac.org.uk>

     From: Darac Marjal <mailinglist@darac.org.uk>
     Date: Sun, 23 Apr 2023 19:09:16 +0100
> 1. stunnel hasn't been in Debian since etch (Debian 4.0).

Thanks for catching that.

> 2. stunnel4 comes with a service file template
> (https://sources.debian.org/src/stunnel4/3%3A5.68-2/debian/stunnel4%40.stunnel.service/),
> which is likely to have been tested to work.

Thanks.  Adjusted  /etc/systemd/system/stunnel.service accordingly.
For anyone else interested, PrivateTmp is described in the
systemd.exec(5) manual.
https://www.freedesktop.org/software/systemd/man/systemd.exec.html

The template might work exactly when no authentication is involved.

> 3. Could the warning about protecting your POP3 connection be the
> cause?

Appears likely.  My intention is that stunnel provides a tunnel in
which POP3 can operate securely. When stunnel is started
interactively, no problem is evident and the MUA authenticates in POP3
inside the tunnel.

The systemd.exec manual cited above has a Credentials section.
Intrigued to study more when I have time.  =8~)

Thx,           ... P.

[toc] | [next] | [standalone]


#257583

FromDavid Wright <deblis@lionunicorn.co.uk>
Date2023-04-25 15:20 +0200
Message-ID<GoqKl-4qCd-1@gated-at.bofh.it>
In reply to#257533
On Mon 24 Apr 2023 at 07:26:35 (-0700), peter@easthope.ca wrote:
>     From: Darac Marjal <mailinglist@darac.org.uk>
>     Date: Sun, 23 Apr 2023 19:09:16 +0100
> > 1. stunnel hasn't been in Debian since etch (Debian 4.0).
> 
> Thanks for catching that.
> 
> > 2. stunnel4 comes with a service file template
> > (https://sources.debian.org/src/stunnel4/3%3A5.68-2/debian/stunnel4%40.stunnel.service/),
> > which is likely to have been tested to work.
> 
> Thanks.  Adjusted  /etc/systemd/system/stunnel.service accordingly.
> For anyone else interested, PrivateTmp is described in the
> systemd.exec(5) manual.
> https://www.freedesktop.org/software/systemd/man/systemd.exec.html
> 
> The template might work exactly when no authentication is involved.
> 
> > 3. Could the warning about protecting your POP3 connection be the
> > cause?
> 
> Appears likely.  My intention is that stunnel provides a tunnel in
> which POP3 can operate securely. When stunnel is started
> interactively, no problem is evident and the MUA authenticates in POP3
> inside the tunnel.
> 
> The systemd.exec manual cited above has a Credentials section.
> Intrigued to study more when I have time.  =8~)

Perhaps it would help for you to explain how you're starting it
successfully, in order to see whether there's something you do
that doesn't translate to running it automatically.

Cheers,
David.

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web