blueness 14/06/10 11:39:33
Added: stunnel.conf-r1 stunnel.tmpfiles.conf-r1
stunnel.rc7
Log:
Fix bug #476672
(Portage version: 2.2.8-r1/cvs/Linux x86_64, signed Manifest commit with key
0xF52D4BBA)
Revision Changes Path
1.1 net-misc/stunnel/files/stunnel.conf-r1
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/stunnel/files/stunnel.conf-r1?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/stunnel/files/stunnel.conf-r1?rev=1.1&content-type=text/plain
Index: stunnel.conf-r1
===================================================================
# Sample stunnel configuration file by Michal Trojnara 2002-2005
# Some options used here may not be adequate for your particular configuration
# Please make sure you understand them (especially the effect of chroot jail)
# Certificate/key is needed in server mode and optional in client mode
# cert = /etc/stunnel/stunnel.pem
# key = /etc/stunnel/stunnel.pem
# Some security enhancements for UNIX systems - comment them out on Win32
# chroot = /chroot/stunnel/
setuid = stunnel
setgid = stunnel
# PID is created inside chroot jail
pid = /run/stunnel/stunnel.pid
# Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
#compression = rle
# Workaround for Eudora bug
#options = DONT_INSERT_EMPTY_FRAGMENTS
# Authentication stuff
#verify = 2
# Don't forget to c_rehash CApath
# CApath is located inside chroot jail:
#CApath = /certs
# It's often easier to use CAfile:
#CAfile = /etc/stunnel/certs.pem
# Don't forget to c_rehash CRLpath
# CRLpath is located inside chroot jail:
#CRLpath = /crls
# Alternatively you can use CRLfile:
#CRLfile = /etc/stunnel/crls.pem
# Some debugging stuff useful for troubleshooting
#debug = 7
#output = stunnel.log
# Use it for client mode
#client = yes
# Service-level configuration
#[pop3s]
#accept = 995
#connect = 110
#[imaps]
#accept = 993
#connect = 143
#[ssmtp]
#accept = 465
#connect = 25
#[https]
#accept = 443
#connect = 80
#TIMEOUTclose = 0
1.1 net-misc/stunnel/files/stunnel.tmpfiles.conf-r1
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/stunnel/files/stunnel.tmpfiles.conf-r1?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/stunnel/files/stunnel.tmpfiles.conf-r1?rev=1.1&content-type=text/plain
Index: stunnel.tmpfiles.conf-r1
===================================================================
d /run/stunnel 0770 stunnel stunnel -
1.1 net-misc/stunnel/files/stunnel.rc7
file :
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/stunnel/files/stunnel.rc7?rev=1.1&view=markup
plain:
http://sources.gentoo.org/viewvc.cgi/gentoo-x86/net-misc/stunnel/files/stunnel.rc7?rev=1.1&content-type=text/plain
Index: stunnel.rc7
===================================================================
#!/sbin/runscript
# Copyright 1999-2014 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
# $Header: /var/cvsroot/gentoo-x86/net-misc/stunnel/files/stunnel.rc7,v 1.1
2014/06/10 11:39:33 blueness Exp $
SERVICENAME=${SVCNAME#*.}
SERVICENAME=${SERVICENAME:-stunnel}
STUNNEL_CONFIGFILE=${STUNNEL_CONFIGFILE:-/etc/stunnel/${SERVICENAME}.conf}
depend() {
need net
before logger
}
get_config() {
if [ ! -e ${STUNNEL_CONFIGFILE} ] ; then
eerror "You need to create ${STUNNEL_CONFIGFILE} first."
return 1
fi
CHROOT=$(grep "^chroot" ${STUNNEL_CONFIGFILE} | sed "s;.*= *;;")
[ -n "${CHROOT}" ] && CHROOT="--chroot ${CHROOT}"
PIDFILE=$(grep "^pid" ${STUNNEL_CONFIGFILE} | sed "s;.*= *;;")
PIDFILE=${PIDFILE:-/run/stunnel/${SERVICENAME}.pid}
}
start() {
get_config || return 1
checkpath -d -m 0775 -o root:stunnel /run/stunnel
if [ "$(dirname ${PIDFILE})" != "/run" ]; then
checkpath -d -m 0755 -o stunnel:stunnel -q $(dirname ${PIDFILE})
fi
ebegin "Starting ${SVCNAME}"
start-stop-daemon --start --pidfile "${PIDFILE}" ${CHROOT} \
--exec /usr/bin/stunnel -- ${STUNNEL_CONFIGFILE}
${STUNNEL_OPTIONS}
eend $? "Failed to start ${SVCNAME}"
}
stop() {
get_config || return 1
ebegin "Stopping ${SVCNAME}"
start-stop-daemon --stop --quiet --pidfile ${PIDFILE}
eend $? "Failed to stop ${SVCNAME}"
}
