FreeTDS User Guide: A Guide to Installing, Configuring, and Running FreeTDS
Prev | Chapter 5. Advanced Configurations | Next

# stunnel HOWTO

Contributed by Bradley Bell.

To set up freetds over stunnel between a Linux webserver and a W2k SQL server:

1. Get unencrypted freetds working

2. Install openssl and stunnel on the Linux box: stunnel.org

3. Download the stunnel binary and openssl dll's for Windows.

4. Generate stunnel.pem (complete with Diffie-Hellman parameters) for placement on the W2k box. See instructions in the stunnel FAQ.

5. Start stunnel on the W2k box:

         $ stunnel.exe -d 61666 -r localhost:1433

   61666 is just an arbitrary port number.

6. Start stunnel on the Linux box:

         $ stunnel -c -d 1433 -r win2kserver:61666

   where `win2kserver` is the hostname or IP address of the W2k box.

7. Set up freetds to use the tunnel. If this is your unencrypted entry in `freetds.conf`:

   Example 5-7. Unencrypted entry in `freetds.conf`

          [win2kserver]
               host = win2kserver
               port = 1433

   the encrypted equivalent uses:

   Example 5-8. Encrypted entry in `freetds.conf`

          [win2kserver]
               host = localhost
       	port = 1433

Prev | Home | Next
TDS Connection Pooling | Up | How to get what works with it working