2 ; Certificate/key is needed in server mode and optional in client mode
3 cert = /etc/stunnel/stunnel.pem
4 ;key = /usr/etc/stunnel/mail.pem
6 ; Protocol version (all, SSLv2, SSLv3, TLSv1)
9 ; Some security enhancements for UNIX systems - comment them out on Win32
15 ; Some performance tunings
16 socket = l:TCP_NODELAY=1
17 socket = r:TCP_NODELAY=1
20 ; Workaround for Eudora bug
21 ;options = DONT_INSERT_EMPTY_FRAGMENTS
25 ;CAfile = /usr/etc/stunnel/certs.pem
27 ;CRLfile = /usr/etc/stunnel/crls.pem
29 ; Some debugging stuff useful for troubleshooting
33 ; Use it for client mode
36 ; Service-level configuration