Shabiel: Created page with "= TLS Enable a VISTA Service = If you want to know why, look elsewhere. == Create a inetd style program that works == Not covering that here. Here's my example:

 # cat ..."

2013-04-02T16:52:35Z

Created page with "= TLS Enable a VISTA Service = If you want to know why, look elsewhere. == Create a inetd style program that works == Not covering that here. Here's my example: <pre> # cat ..."

New page

= TLS Enable a VISTA Service =
If you want to know why, look elsewhere.

== Create a inetd style program that works ==
Not covering that here. Here's my example:

<pre>
# cat ~vista/bin/VPRJ.sh
#!/bin/bash
cd "$(dirname "$0")"
source ./set_env
$gtm_dist/mumps -r GTMLNX^VPRJREQ
</pre>

== Install stunnel ==
For Ubuntu, that was <code>apt-get install stunnel4</code>

== Create a self-signed certificate ==
<pre>
cd /etc/stunnel
openssl req -new -x509 -days 11365 -nodes -out stunnel.pem -keyout stunnel.pem
</pre>

== Create xinetd service ==
On your favorite port. If it's a web server, you should use 443.
<pre>
# cat /etc/xinetd.d/VPRJ-9281-TLS
service VPRJ-9281-TLS
{
port = 9281
socket_type = stream
protocol = tcp
type = UNLISTED
user = vista
groups = yes
server = /usr/bin/stunnel
server_args = -p /etc/stunnel/stunnel.pem -l /home/vista/bin/VPRJ.sh
env = USER=vista
env += HOME=/home/vista
wait = no
disable = no
per_source = UNLIMITED
instances = UNLIMITED
}
</pre>

== Testing ==
I mostly use curl for testing HTTP services. Tell curl to ignore certificate validation by the <code>-k</code> flag.

<pre>
# curl -ki https://localhost:9281/ping
HTTP/1.1 200 OK
Date: Tue, 02 Apr 2013 16:52:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 20

{"status":"running"}
</pre>

TLS Enable VISTA Service - Revision history

Shabiel: Created page with "= TLS Enable a VISTA Service = If you want to know why, look elsewhere. == Create a inetd style program that works == Not covering that here. Here's my example:
# cat ..."