PASSPORT Knowledge Base
Configuration

Date Published: October 23, 2008

Title

Configure PASSPORT and STunnel for SSL session

Product

PASSPORT PC to Host, PASSPORT Web to Host

Emulation Types

TN3270, TN5250, VT, SCO ANSI, Wyse 60

Issue

We do not have SSL installed on our host but need to provide encrypted sessions to remote users. How can I configure PASSPORT to use STunnel for encrypted sessions?

Solution

STunnel is an SSL Proxy Server that may be used to provide encryption for remote users and eliminate the need to install and configure SSL on the host. The PASSPORT session must be configured to connect to the IP Address or host name of the server running STunnel. The STunnel configuration file, which is called stunnel.conf, must have an entry for each host similar to the following:

 

[MyHost]

accept = MyServer:992

connect = MyHost:23

 

The accept line is the IP Address or host name and TCP port that the STunnel server will listen on. This same information should be used to configure the PASSPORT session for this host.

 

The connect line is the IP Address or host name and TCP port of the host that STunnel will connect to.   

More Information

Keywords

Stunnel, SSL Proxy, encryption