Support: Stunnel

To improve your privacy, you need to encrypt the connection between you and the server tusk.cotse.com. Stunnel provides the additional security between you and our server. As described at www.stunnel.org: "..Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code."

Directions for installing and configuring stunnel and your browser settings are provided below.

You will need to download the version for your Operating System (We recommend getting the newest version).

For those who wish to verify our stunnel certificate: download the CA Cert and save it as ca-cert.crt in your stunnel directory. You will then edit the stunnel.conf file, as described in the right column.

Here's what we've done to get stunnel working on our Windows (win32) systems:

• We downloaded and installed stunnel).
• We then edited stunnel.conf (same directory stunnel was installed in; Depending on the version of Windows you are using, you can click "Tools -> Options", then click the "View" tab at the top, make sure you have "Hide extensions for known file types" unchecked. This will allow you to see the filename extension.

Here's how to complete the installation and configuration process:

• Open the stunnel.conf file in Notepad or your favorite text editor.
• Edit the stunnel.conf file so that it contains:

 

# stunnel client setup

client = yes

# Service-level configuration

[s1]

accept = 127.0.0.1:8082
connect = tusk.cotse.com:8081

• For those who want to verify our Stunnel certificate and who have downloaded the CA Cert and and saved it as ca-cert.crt in the stunnel directory, edit the stunnel.conf file to include:

  client = yes

  VERIFY = 2

  CAfile = C:\Program Files\stunnel\ca-cert.crt

  # Service-level configuration

  [s1]

  accept = 127.0.0.1:8082

  connect = tusk.cotse.net:8081

   

• Save the changes.
• Rightclick on stunnel.exe and create a shortcut
• Drag the newly created shortcut out to the desktop

Now start stunnel and change the proxy configuration in your browser:

• Where you had "tusk.cotse.net" for service address in the brower proxy settings, change it to 127.0.0.1
• Where you had 8080 as the port for the proxy service, change it to 8082
• If you had entered tusk.cotse.net and port 8080 for other services such as https and ftp, change those also to the new address and port.
• Save your browser changes.

Once you have configured your proxy with stunnel, you will have to start stunnel to be able to use your browser. As before, you will get a login box when you start a new browser session.