Stunnel: SSLing Internet Services Easily

This paper provides a method to securely use existing clear-text protocols under SSL without any need to modify the existing software or source code. There are reasons for using Stunnel to add security on a protocol instead of adding SSL capability into a program. One of the major reasons for using Stunnel is that source code may not be available for the program especially if it is a commercial application and the vendor decides not to add SSL to the program or the vendor goes out of business. In extreme cases, the complete source code to the program may not be available. Another reason is that it takes time to add SSL capability to in-house programs. Stunnel could be useful as a "stopgap" measure while SSL is being implemented and tested in the program.

Tags:

Read the complete paper at SANS