packages/net/stunnel/files, branch master

stunnel: create PID directory before alt_config_file return

2026-04-01T06:47:47Z

When alt_config_file is set, global_defs() returns before creating the PID file directory. stunnel then fails to start because it cannot write its PID file to the nonexistent directory. Move the PID directory creation and ownership setup above the alt_config_file early return so it runs regardless of config mode. Fixes: openwrt/openwrt#28982 Signed-off-by: Joshua Klinesmith Co-Authored-By: Claude Opus 4.6 (1M context)

stunnel: add new protocol option capwin and capwinctrl

2022-01-10T13:52:44Z

The new protocol capwin and capwinctrl was added in version 5.61 https://www.stunnel.org/NEWS.html Signed-off-by: Florian Eckert

stunnel: add missing sessionResume option

2022-01-10T13:32:03Z

The option sessionResume was added in version 5.60 https://www.stunnel.org/NEWS.html Signed-off-by: Florian Eckert

stunnel: fix some shellcheck warnings

2019-07-29T13:20:43Z

Signed-off-by: Florian Eckert

stunnel: update version to 5.54

2019-05-21T09:40:04Z

Update to latest stable release 5.54 Add new options ticketKeySecret and ticketMacSecret to uci validation. Signed-off-by: Florian Eckert

stunnel: update to version 5.51

2019-04-10T07:06:46Z

Update to version 5.51 Signed-off-by: Florian Eckert

stunnel: Update init script

2019-01-29T13:49:23Z

The reworked init script: * Loads and validates options using uci_validate_section() (through uci_load_validate()) * Allows service options be specified in the globals section * Hard-codes less global options (debug, syslog), as their default values already work * Adds support for almost all options (up to the current package version, 5.49) * Moves the pid file into a subdirectory (/var/run/stunnel) so that it can be created successfully when setuid is used Certain options are omitted: * chroot - requires more setup than the init script can manage * fips, libwrap - disabled at compile-time * iconActive, iconError, iconIdle, taskbar - gui/win32 only * verify - obsolete, verifyChain and/or verifyPeer should be used instead Signed-off-by: Jeffery To

net/stunnel: check if service section is configured to prevent crash loop

2018-01-23T13:37:02Z

If a service section is not presented in the configuration then stunnel will always start anyway. This ends in a crash loop because the configuration is not valid. Checking in "uci" mode if a service section is presented and only then start the stunnel service will solve this issue. Signed-off-by: Florian Eckert

net/stunnel: do always stop/start on config change

2018-01-23T10:53:47Z

Do not send a SIGHUP on reload configuration let procd restart the service with stop/start. This is saver. Add uci generated stunnel file to procd "file" attribute to reload/restart the stunnel service. Signed-off-by: Florian Eckert

net/stunnel: add enabled config option

2017-12-15T07:03:41Z

Add an enabled option for the service section, so you could keep your configuration in place without apply this section on startup or service reload. Signed-off-by: Florian Eckert