Bug#196843: ITP: ssltunnel -- PPP over SSL virtual private networking
Thomas Seyrat dijo [Tue, Jun 10, 2003 at 11:01:44AM +0200]:
> Package: wnpp
> Version: unavailable; reported 2003-06-10
> Severity: wishlist
>
> * Package name : ssltunnel
> Version : 1.07
> Upstream Author : Alain Thivillon <at@rominet.net>
> * URL : http://www.hsc.fr/ressources/outils/ssltunnel/
> * License : BSD
> Description : PPP over SSL virtual private networking
>
> ssltunnel is a client/server software to establish PPP links over
> SSL/TLS sessions. Client and server are mutually authenticated using
> X509 certificates, PPP packets are encrypted/decrypted realtime on
> each side. The client has the ability to initiate the connection
> through an HTTP/HTTPS relay, even if an authentification is needed.
Does ssltunnel provide any functionality beyond that of stunnel?
Quoting from stunnel's FAQ, it provides PPP secure sessions too:
--------------------------
Q: How do I use stunnel to create a secure PPP session over the internet?
A: Follow these steps:
1. Set up your PPP stuff as you would otherwise do for a serial (dialup)
connection, passwords and all.
2. Decide on how you want stunnel to run on the server system, i.e. inetd
vs. daemon mode.
3. On the server, use something like (observe the -L for pty mode)
"stunnel -d 2020 -L /usr/sbin/pppd -- pppd local"
4. On the client system, in order to bring up the secure PPP link run
"stunnel -c -r server:2020 -L /usr/sbin/pppd -- pppd local"
--------------------------
Checking the manpage:
--------------------------
If you want to provide tunneling to your pppd daemon on port 2020,
use something like
stunnel -d 2020 -L /usr/sbin/pppd -- pppd local
(...)
stunnel can be used to add SSL functionality to commonly used inetd
daemons like POP-2, POP-3, and IMAP servers, to standalone daemons
like NNTP, SMTP and HTTP, and in tunneling PPP over network sockets
without changes to the source code.
--------------------------
Greetings,
--
Gunnar Wolf - gwolf@gwolf.cx - (+52-55)5630-9700 ext. 1366
PGP key 1024D/8BB527AF 2001-10-23
Fingerprint: 0C79 D2D1 2C4E 9CE4 5973 F800 D80E F35A 8BB5 27AF
Reply to: