HTTPS/Stunnel not showing up in web server test

[Weather_Junkie]

Hi All, okay so I believe I have stunnel up and running. If the service is running on my PC, I can log on through the BI app (WAN address https:// enabled) and see my cameras while outside my home network. If I turn stunnel service off, I can't log in remotely. That's the only way I know of now to see that it's working.

Well while runningI the Remote Wizard this morning, I noticed that on the web server page, the "https (if listening on stunnel" section was blank and didn't know if this meant I didn't have stunnel set up correctly. Again, things seem to be running okay but I'm new to stunnel as you may know so I just want to make sure I'm not missing a setting.

 

[Terk]

Here are my settings

 

[Weather_Junkie]

Here are my settings

Do you get a successful test in the https/stunnel box when you run the wizard?

 

[Terk]

No the test fails with an error 401 (Unathorized) I believe because it isn't able to sign in without credentials. However the app, and UI3 both work perfectly over the https connection.

 

[Weather_Junkie]

No the test fails with an error 401 (Unathorized) I believe because it isn't able to sign in without credentials. However the app, and UI3 both work perfectly over the https connection.

Okay close enough to my situation except I'm not getting any errors on that one page. I am however getting failed tests on the router and remote access sections of the wizard but still have the access I need to log in from my BI app. Just want to make sure stunnel is doing its thing and that these errors are not because of an improper stunnel setup.

 

[Terk]

As long as you can access https://108.x.x.x or https://192.168.1.x it should be fine. STunnel just allows you to establish an https connection to the machine then encrypts the traffic to send to the BI service on that same machine. I still use this for all of my internal traffic and remote traffic which is actually internal since I VPN in rather than open a port (not strictly necessary to encrypt traffic on your internal network but it doesn't impact the machine and adds just that little bit more security.