[stunnel-users] Feature request - verify fall-back

Sudhaker Raj sudhaker.raj at gmail.com
Wed May 7 21:34:09 CEST 2008


Hi Team,

I wish to use stunnel for following use-case (to create a
highly-protected website which can be accessed only using a valid
client-cert).

gateway.example.com:443 -> public.example.com:80 (when client-cert
verification fails)
gateway.example.com:443 -> intranet.example.com:80 (when client-cert
verification ok - normally hidden from public)

As of now stunnel simply drops the connection when service is
configured to verify the client certificate and verification fails. Is
it possible to add a fall-back connect when verification fails.

[protected-web]
verify=3
accept=443
connect=intranet.example.com:80
noverify=public.example.com:80

I guess it will be a nice addition to stunnel's feature list.

Thanks,
Sudhaker



More information about the stunnel-users mailing list