

Name of the Certificate this is relatively easy. Enter a path and file name to a working directory and complete theĬontinue with Convert Certificate from PFX to PEM.
#Configuring stunnel password#
You want to export as PFX the Private Key, include allĬertificates in the certification path, and use a password only to secure theįile. In the middle paneįind and select your certificate. 'Certificates', then 'Personal', and select 'Certificates'. 'Next', 'Local Computer', and then 'Finish'. 'Certificates' from the list, and click 'Add'.
#Configuring stunnel windows#
Using the Windows Certificate Management Console, or PowerShell. Need to export the certificate into a usable format. If your certificate is installed via Windows Certificate Management, you will Whether you use a Public Certificate Authority or Internal CertificateĪuthority, the next step is exporting the certificate from Windows into a format You will need this to convertĮven though the installer says it is for win64, it installs stunnel by default
#Configuring stunnel install#
Install openSSL tools when you install stunnel.

Select the latest stunnel windows package (at the time of writing this is If your version of Powershell is 6.0 or above. Or (in a Powershell console) Remove-Service -Name fossil To remove the service, run the following in a Powershell or cmd console: sc.exe delete fossil Need to enter the following to avoid rebooting the server: Start-Service -Name fossil-secure New-Service does not automatically start a service on install, so you will Using -https will tell Fossil to generate HTTPS URLs rather Host on the designated port - 9000 in this case - and will not respond to The use of -localhost means Fossil will only listen for traffic on the local Run the following: New-Service -Name fossil-secure -DisplayName fossil-secure -BinaryPathName '"C:\Program Files\FossilSCM\fossil.exe" server -localhost -port 9000 -https -repolist "D:/Path/to/Repos"' -StartupType Automatic It properly for use with stunnel as an https proxy. We will need to change the command to install the Fossil Service to configure Stunnel, we will use Advanced service installation using PowerShell. Configure Fossil Service for httpsĭue to the need for the -https option for successfully using Fossil with Please make sure you are using FossilĢ.10 or later on Windows. There is a bug in Fossil 2.9 andĮarlier that prevents these versions of Fossil from properly constructing https Versions may not function in a similar manner. These instructions were tested with Fossil 2.10 and stunnel 5.55.
