Difference between revisions of "Install Stunnel"

From Vital Soft Wiki
Jump to: navigation, search
(Created page with "=== Prepare for Stunnel Install === * Please note that installation does require a reboot of your PC / workstation. * You may need Admin level access to your PC to complete th...")
 
 
Line 3: Line 3:
 
* You may need Admin level access to your PC to complete the install.
 
* You may need Admin level access to your PC to complete the install.
 
* Download the latest version of stunnel [https://stunnel.org/downloads here].
 
* Download the latest version of stunnel [https://stunnel.org/downloads here].
 +
* Download the Fiserv Certificate files [https://vital-soft.com/?page_id=544&product=stunnel&release=current here].
  
 
=== Installing Stunnel ===
 
=== Installing Stunnel ===
Line 12: Line 13:
  
 
=== Install the Certificates ===
 
=== Install the Certificates ===
* Copy the the saved certificate files from step 1 (certs.pem, stunnel.pem) into the following directory:
+
Follow these steps to install the certificates:
 
<pre>
 
<pre>
C:\Program Files (x86)\stunnel\conf
+
unzip the Stunnel_Certs_May_2024.zip file
 +
copy stunnel.pem and certs.pem to C:\Program Files (x86)\stunnel\conf
 
</pre>
 
</pre>
 +
 
=== Customize the Stunnel Configuration ===
 
=== Customize the Stunnel Configuration ===
 
* Edit the stunnel configuration file. The file is located here:
 
* Edit the stunnel configuration file. The file is located here:
Line 43: Line 46:
 
connect = visimage-cert.fiservapps.com:8004
 
connect = visimage-cert.fiservapps.com:8004
 
</pre>
 
</pre>
 +
 
=== Install the Stunnel Service ===
 
=== Install the Stunnel Service ===
 
* Install the stunnel '''service''' using Powershell.  If you installed stunnel for all users on the computer, you may need to run Powershell as the Administrator.
 
* Install the stunnel '''service''' using Powershell.  If you installed stunnel for all users on the computer, you may need to run Powershell as the Administrator.
Line 48: Line 52:
 
<pre>
 
<pre>
 
cd C:\Program Files (x86)\stunnel\bin
 
cd C:\Program Files (x86)\stunnel\bin
./stunnel -uninstall
 
 
./stunnel -install
 
./stunnel -install
 
</pre>  
 
</pre>  
Line 54: Line 57:
  
 
=== Verifying the Installation ===
 
=== Verifying the Installation ===
* Run Windows Services and verify that the stunnel service is running.  The service is now called "Stunnel TLS Wrapper".
+
* Run Windows Services and verify that the stunnel service is running.  The service is called "Stunnel TLS Wrapper".
 
* If the service is running, launch Visimage3 and test that you are able to successfully start server.
 
* If the service is running, launch Visimage3 and test that you are able to successfully start server.
  
 
[[Visimage3 Setup for Fiserv Online Clients|Back...]]
 
[[Visimage3 Setup for Fiserv Online Clients|Back...]]

Latest revision as of 16:38, 3 July 2025

Prepare for Stunnel Install

  • Please note that installation does require a reboot of your PC / workstation.
  • You may need Admin level access to your PC to complete the install.
  • Download the latest version of stunnel here.
  • Download the Fiserv Certificate files here.

Installing Stunnel

  • Install the most recent version of stunnel (5.75 in June 2025.)
    • Choose the options that are appropriate for your organization.
    • By default, stunnel will be installed in C:\Program Files (x86)\
    • During installation you will be asked questions to create a default certificate. This certificate will not be used, so you can enter whatever values you choose or just press Enter on all of the prompts.
    • Do NOT run stunnel at the end of installation.

Install the Certificates

Follow these steps to install the certificates:

unzip the Stunnel_Certs_May_2024.zip file
copy stunnel.pem and certs.pem to C:\Program Files (x86)\stunnel\conf

Customize the Stunnel Configuration

  • Edit the stunnel configuration file. The file is located here:
C:\Program Files (x86)\stunnel\conf\stunnel.conf
  • Remove the semi-colon comments from the debug and output lines (lines 11 & 12):
debug=info
output=stunnel.log
  • Add the following lines after "output=stunnel.log":
CAfile = certs.pem
cert = stunnel.pem

[Visimage Linux Prod]
; Prod connection to Linux
client = yes
accept = 30503
connect = visimage.fiservapps.com:8004

[Visimage Linux Cert]
; Cert connection to Linux
client = yes
accept = 30504
connect = visimage-cert.fiservapps.com:8004

Install the Stunnel Service

  • Install the stunnel service using Powershell. If you installed stunnel for all users on the computer, you may need to run Powershell as the Administrator.
  • When Windows Powershell is running, enter the following commands:
cd C:\Program Files (x86)\stunnel\bin
./stunnel -install
  • Reboot your PC.

Verifying the Installation

  • Run Windows Services and verify that the stunnel service is running. The service is called "Stunnel TLS Wrapper".
  • If the service is running, launch Visimage3 and test that you are able to successfully start server.

Back...