stunnel
FIPS 140-3Networkingstunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.
stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.
stunnel is a TLS encryption proxy that adds SSL/TLS protection to network connections made by programs that have no built-in TLS support. It sits between a client and a server, terminating or originating TLS on one side and passing plaintext traffic on the other, so that legacy services can participate in encrypted communication without any modification to their source code.
Common use cases include wrapping plaintext SMTP, IMAP, LDAP, and PostgreSQL connections with TLS, offloading TLS termination from backend services that cannot handle certificates directly, and creating authenticated TLS tunnels between two hosts. stunnel operates in either client mode (connecting to a remote TLS endpoint) or server mode (accepting TLS connections and forwarding plaintext to a local service), and a single process can run multiple named service sections simultaneously.
For more information, visit the stunnel project website.