Stunnel - TLS proxy

[h3kt0r]

I've read a few posts on this forums about TLS support under Windows XP and i've just stumbled upon Stunnel,

which is a proxy designed to add TLS encryption functionality to existing clients and servers.

I don't know if this can solve the TLS issue under XP, but here you go to learn more about Stunnel.

And here is the latest version (5.49) for Windows XP (32 bits).

Edited November 8, 2020 by h3kt0r

[ED_Sln]

No, it doesn't fit. Stunnel is a tunnel that encrypts traffic between server and client.

 

[Dave-H]

Thanks, yes Stunnel has been around a long time, and I know that many people use it.
Personally I use ProxHTTPSProxy, which has been ported to XP my @heinoganda.
I don't know what the pros and cons are of one program over the other, but HTTPSProxy seems to do everything I need at the moment.
Welcome to the forum BTW!

Edited November 8, 2020 by Dave-H
Typo

[luweitest]

Stunnel works like this (my experience of old version): If you want to connect https://siteA, you create a port mapping between localhost:1234 and siteA:443, then visit http://localhost:1234 instead in browser. Apparently you cannot create too many mappings yourself.

Edited November 9, 2020 by luweitest
grammer

[FranceBB]

21 hours ago, Dave-H said:

Thanks, yes Stunnel has been around a long time, and I know that many people use it.
Personally I use ProxHTTPSProxy, which has been ported to XP my @heinoganda.
I don't know what the pros and cons are of one program over the other, but HTTPSProxy seems to do everything I need at the moment.
Welcome to the forum BTW!

+1 for ProxHTTPSProxyMii by @heinoganda

I've been using it for years now and it works just fine.

Besides, you can also decide which websites are gonna be bypassed so that the certificate provided is the real certificate provided by the server, so it solves pretty much every problem. The only thing is that it doesn't support TLS1.3 (yet), but it works just fine for TLS1.2 with ECC certificates.

[RainyShadow]

10 hours ago, FranceBB said:

+1 for ProxHTTPSProxyMii by @heinoganda

On 11/8/2020 at 5:54 PM, Dave-H said:

Personally I use ProxHTTPSProxy, which has been ported to XP my @heinoganda.

Umm, excuse my ignorance, but what did heinoganda do?

As jaclaz says:

On 10/12/2020 at 9:03 PM, jaclaz said:

Why don't you check the original forum for the thingy?

https://www.prxbx.com/forums/forumdisplay.php?fid=48

https://www.prxbx.com/forums/showthread.php?tid=2191

https://www.prxbx.com/forums/showthread.php?tid=2172

jaclaz

I use this and it didn't need any kind of "porting"...

 

[FranceBB]

8 hours ago, RainyShadow said:

Umm, excuse my ignorance, but what did heinoganda do?

As jaclaz says:

I use this and it didn't need any kind of "porting"...

 

You can use the original thing provided that you run it via Python, so it's compiled at run time.

The exe by Heinoganda is compiled at compilation time and is more compatible with other CPUs than the built-in Python runtime dll

[h3kt0r]

Okay, you're right, this is not a solution for client machines, rather quite the opposite in fact.

I've just read through an article here, and it's obviously for servers...

[Dave-H]

I know some people do use Stunnel on domestic PCs for things like logging onto current e-mail servers with legacy e-mail clients like Eudora which now can't log on normally.

[h3kt0r]

They probably should upgrade to Eudora OSE.

I'm running this one on a fresh install of XP without any trouble to connect.

[Dave-H]

I tried Eudora OSE but dropped it pretty quickly.
It doesn't have the facility to edit received messages for a start, which I use all the time on Eudora.
It's also based on a version of Thunderbird which is itself very out of date now, and the program hasn't been updated for years.
Off topic, but you're better off IMO with the last version of "real" Eudora (7.1.0.9) and the Hermes update which adds TLS 1.2 support, which many e-mail providers are now insisting on.