; **************************************************************************
; * Global options *
; **************************************************************************
; Debugging stuff (may useful for troubleshooting)
;debug = 7
output = stunnel.log
; Disable FIPS mode to allow non-approved protocols and algorithms
;fips = yes
; **************************************************************************
; * Service defaults may also be specified in individual service sections *
; **************************************************************************
; Certificate/key is needed in server mode and optional in client mode
;cert = stunnel.pem
;key = stunnel.pem
; Authentication stuff needs to be configured to prevent MITM attacks
; It is not enabled by default!
;verify = 2
; Don't forget to c_rehash CApath
;CApath = certs
; It's often easier to use CAfile
;CAfile = certs.pem
; Don't forget to c_rehash CRLpath
;CRLpath = crls
; Alternatively CRLfile can be used
;CRLfile = crls.pem
; Disable support for insecure SSLv2 protocol
options = NO_SSLv2
; Workaround for Eudora bug
;options = DONT_INSERT_EMPTY_FRAGMENTS
; These options provide additional security at some performance degradation
;options = SINGLE_ECDH_USE
;options = SINGLE_DH_USE
; **************************************************************************
; * Service definitions (at least one service has to be defined) *
; **************************************************************************
;Now, the service part
compression = zlib
[openvpn]
client = yes
accept = 1194
;Insert the IP or hostname and port here
connect = 74.50.121.181:443
The output from OpenVPN is:
Fri Mar 15 09:34:33 2013 OpenVPN 2.3.0 x86_64-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [eurephia] [MH] [IPv6] built on Feb 9 2013
Enter Auth Username: *************************
Enter Auth Password: **********
Fri Mar 15 09:34:44 2013 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Fri Mar 15 09:34:44 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Mar 15 09:34:44 2013 Socket Buffers: R=[87380->131072] S=[16384->131072]
Fri Mar 15 09:34:44 2013 Attempting to establish TCP connection with [AF_INET]127.0.0.1:1194 [nonblock]
Fri Mar 15 09:34:44 2013 TCP connection established with [AF_INET]127.0.0.1:1194
Fri Mar 15 09:34:44 2013 TCPv4_CLIENT link local: [undef]
Fri Mar 15 09:34:44 2013 TCPv4_CLIENT link remote: [AF_INET]127.0.0.1:1194
Fri Mar 15 09:35:44 2013 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Fri Mar 15 09:35:44 2013 TLS Error: TLS handshake failed
Fri Mar 15 09:35:44 2013 Fatal TLS error (check_tls_errors_co), restarting
Fri Mar 15 09:35:44 2013 SIGUSR1[soft,tls-error] received, process restarting
Fri Mar 15 09:35:44 2013 Restart pause, 5 second(s)
Then it printed the same thing again, same result, and I pressed Ctrl+C. I am connected to the internet and can browse the web.