> Darren J Moffat writes:
> > For example, an unprivileged user can start stunnel from the command
> > line so that it listens on a ephemeral port number. The configuration
> > file provided by the user will define what stunnel should do with TCP
> > connections to the localhost on this port number. This could be used by
> > a non-SSL aware mail client to communicate securely with a SSL
> > protected mail server.
>
> I assume that "INETD MODE" (in the man page) is supported ... it might
> be good to update the man page to explain how to use stunnel with the
> Solaris inetd. (Using that mode allows each individual mapping to be
> managed as a service by SMF, rather than having all of the maps dumped
> into one file, with a single SMF service for stunnel.)
I have added a section to the man page to describe how to add a new service to
inetd, although IMHO this should be explained in inetd(1M) and inetd.conf(4).
Mark
----------------------------------------------------------------------------
Mark Fenwick, Solaris Security Technologies.
TEL: +1 (650) 786 2733 (X82733) __o
Sun Microsystems Inc, Menlo Park, California. `\<,_
(*)/ (*)
----------------------------------------------------------------------------