1 --- stunnel-4.27/tools/stunnel.conf-sample.in.orig 2009-04-16 11:10:09.000000000 +0200
2 +++ stunnel-4.27/tools/stunnel.conf-sample.in 2009-04-23 10:59:47.431971599 +0200
4 ; Please make sure you understand them (especially the effect of the chroot jail)
6 ; Certificate/key is needed in server mode and optional in client mode
7 -cert = @prefix@/etc/stunnel/mail.pem
8 -;key = @prefix@/etc/stunnel/mail.pem
9 +cert = /etc/stunnel/mail.pem
10 +;key = /etc/stunnel/mail.pem
12 ; Protocol version (all, SSLv2, SSLv3, TLSv1)
15 ; Some security enhancements for UNIX systems - comment them out on Win32
16 -chroot = @prefix@/var/lib/stunnel/
18 -setgid = @DEFAULT_GROUP@
19 +;chroot = /var/lib/stunnel/
22 ; PID is created inside the chroot jail
24 +pid = /var/run/stunnel/stunnel.pid
26 ; Some performance tunings
27 socket = l:TCP_NODELAY=1
29 ; CApath is located inside chroot jail
31 ; It's often easier to use CAfile
32 -;CAfile = @prefix@/etc/stunnel/certs.pem
33 +;CAfile = /etc/stunnel/certs.pem
34 ; Don't forget to c_rehash CRLpath
35 ; CRLpath is located inside chroot jail
37 ; Alternatively you can use CRLfile
38 -;CRLfile = @prefix@/etc/stunnel/crls.pem
39 +;CRLfile = /etc/stunnel/crls.pem
41 ; Some debugging stuff useful for troubleshooting
45 ; Service-level configuration