SSL Proxy
Convert a TCP service to its SSL variant
You probably know secure HTTP from secure websites. Say, you want to operate a secure web server but have only a normal server. SSL Proxy can be your solution: It's plugged into the connection between the client and the server and adds Secure Socket Layer (SSL) support. Or the other way around: You have an ordinary telnet client but want to connect to a secure site. Just start SSL Proxy with the appropriate parameters and -- voila. That's what SSL Proxy can do for you.
SSL Proxy vs. Stunnel
SSL Proxy is roughly the same thing as Stunnel, but with less features. We implemented SSL Proxy for CIFS encryption with automatic encryption negotiation. This option was not available in Stunnel when SSL Proxy was made.
Since current versions of Stunnel also implement CIFS encryption, we no longer support SSL Proxy. Please use Stunnel instead. We still keep this code as a programming example on our site.
Features
- Has been ported to Linux, NEXTSTEP, OPENSTEP/Mach, Windows NT 4.0 with Cygwin 32 and should compile on Solaris, SunOS, HP-UX, SGI / IRIX, FreeBSD, NetBSD, BSDI, AIX, OSF/1 (DEC-Unix)
- Native Windows port by Kai Engert available from http://go.to/kai.engert
- Built on top of the SSLeay or OpenSSL library.
- Works only for protocols which use a single TCP connection. It therefore does NOT work for FTP.
- Implements no session-caching. This means that connecting is slow, which is a disadvantage for protocols with frequent connects/disconnects such as http.
- Open Source Software: distributed under the GNU General Public License.
Download Source Code
