Stunnel with Trusted SSL?

[Hacker]

Anyone set one up with step-by-step instructions to set up a trusted SSL cert like Postive SSL or EsentialSSL? Most instructions were for *nix and not Windows which BI runs on.

 

[Frank Ecker]

I use free certificates from Let's Encrypt. The process of refreshing the certs is a bit annoying because I need to shut down stunnel and fire up nginx to create the certs then revert back to stunnel when I am done. Otherwise, no problems at all. If you want instructions for Let's Encrypt, I can post them.

Here is my stunnel config

output = C:\Program Files\stunnel\config\stunnel.log

[Blue-Iris]
accept = 443
connect = 81
CApath = C:\Program Files\stunnel\config\
cert = C:\Program Files\stunnel\config\certX.crt.pem
key = C:\Program Files\stunnel\config\certX.key.pem
;CAfile = C:\Program Files\stunnel\config\certX-issuer.crt.pem

 

[Hacker]

I use free certificates from Let's Encrypt. The process of refreshing the certs is a bit annoying because I need to shut down stunnel and fire up nginx to create the certs then revert back to stunnel when I am done. Otherwise, no problems at all. If you want instructions for Let's Encrypt, I can post them.

Here is my stunnel config

output = C:\Program Files\stunnel\config\stunnel.log

[Blue-Iris]
accept = 443
connect = 81
CApath = C:\Program Files\stunnel\config\
cert = C:\Program Files\stunnel\config\certX.crt.pem
key = C:\Program Files\stunnel\config\certX.key.pem
;CAfile = C:\Program Files\stunnel\config\certX-issuer.crt.pem

Thanks. That would be helpful. (But I prefer say PositiveSSL as it is more hassle free without the renewal).

 

[Hacker]

NGinx for Windows?

 

[Frank Ecker]

NGinx for Windows?

Yes, You can download the nginx for windows and execute it directly from the downloaded folder structure. It isn't really even an app that gets installed. I'll PM you my instructions so you can try them out and let me know of any edits that need to be made.

 

[Hacker]

Yes, You can download the nginx for windows and execute it directly from the downloaded folder structure. It isn't really even an app that gets installed. I'll PM you my instructions so you can try them out and let me know of any edits that need to be made.

I created my certs using my Sybology NAS and went to get my PositiveSSL cert.
I have:
xxx.crt
xxx.p7b
xxxca-bundle
and my own private key xxx.key.

Point to the stunnel path, I have no luck getting it to work .
.

 

[Hacker]

Paths are similar and I appended .pem to the certs (not sure whether it is possible)
CApath = C:\Program Files (x86)\stunnel\config\
cert = C:\Program Files (x86)\stunnel\config\xxx.crt.pem
key = C:\Program Files (x86)\stunnel\config\xxx.key.pem
CAfile = C:\Program Files (x86)\stunnel\config\xxxbundle.crt.pem