<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi,<br>
The difference is that, on WCE, for stunnel code, it is
straigthforward to access the "unique profile" stunnel.conf, WITHOUT
in fact dealing with envvars, <br>
rather than 1/ decode %VARNAME% tokens in conf file and then ask env
for replacement...<br>
well...ok..we can create stubs as well for getenv etc... but is is
much more complicated.<br>
<br>
For W32 platforms, communicating with a server with env vars can
open issues.<br>
BUT working in "local user sandbox", folders etc...is more secure
than modifying system files by everyone through envvars.<br>
<br>
More generally, I agree that a per user conf can be useful ONLY IF
each user is able, and "directed to" start HIS/HER STUNNEL by HAND,
in a user space process.<br>
<br>
But to achieve this....stunnel is ALREADY ready to go by using the
command line like this "stunnel myownconfig.conf", of course having
"my" own copy of stunnel executable.<br>
<br>
So there is no real need to have an embeddef feature in stunnel for
conf file customization per user.<br>
<br>
And, once again, as conf file are just "text files", it is quite
easy to create a bunch of such from a template, by text editiong
tools : sed on win32 is really powerful, or win32 perl engine, or
whatever scripting language you prefer.<br>
<br>
Yours sincerely,<br>
Pierre<br>
<br>
<div class="moz-cite-prefix">Le 31/05/2016 14:24, Dmitry Bakshaev a
écrit :<br>
</div>
<blockquote
cite="mid:CAK9DdiGrYyj9trDCtLgyd=bSfQEH5w_Ywmiw5JyDDAKLXU2NmA@mail.gmail.com"
type="cite">
<div dir="ltr"><br>
<div class="gmail_extra"><br>
<div class="gmail_quote">2016-05-31 12:02 GMT+04:00 Pierre
Delaage <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:delaage.pierre@free.fr" target="_blank">delaage.pierre@free.fr</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"> Did not have a look
at the code yet, but should it be possible to replace
envvars usage by some keys in the registry on windows
platform and/or %userprofile%/config-file ?<br>
<br>
Anyway, my opinion on the patch is that there is no real
interest for "generic/self-expanding" config file , and
it is even dangerous :<br>
I would not trust stunnel if, at run time, its config
could be modified by USER envvars...<br>
</div>
</blockquote>
</div>
<br>
which difference between %userprofile%/config-file and USER
envvars?<br>
</div>
<div class="gmail_extra">both are USER owned and USER
controlled.<br>
certificate and keys also USER private data.<br>
and stunnel started by USER owned by USER.<br>
</div>
<div class="gmail_extra">if stunnel started by SYSTEM/ADMIN he
uses SYSTEM/ADMIN envvars (if needed), certs, keys, etc.<br>
</div>
<div class="gmail_extra"><br>
global "generic/self-expanding" config file is ADMIN owned.<br>
USER has permissions to substitute some values, restricted by
ADMIN.<br>
</div>
</div>
</blockquote>
<br>
</body>
</html>