Stunnel & Certs
This guide is for Linux Debian. For other OSes, see Stunnel docs.
Jump to: SSL certificate upload ·
Config file
Install Stunnel (Debian)
Install and enable stunnel4:
sudo apt update && sudo apt install -y stunnel4
sudo mkdir -p /etc/stunnel
sudo systemctl enable stunnel4Config File
SSL certificate (manual zip)
Upload a zip from your CA dashboard containing certificate.crt,
ca_bundle.crt, and private.key.
The app builds one PEM (cert + chain + key), writes it to Cert path on server,
ensures cert = in stunnel.conf matches that path, and restarts stunnel4.
Production hosts need passwordless sudo — see deployment-docs/stunnel-sudoers.example.
Max 32 MB. Files are matched by name anywhere inside the archive.
Same PEM order as docs/certs/build_stunnel_pem.py and docs/certs/README.md in this repo.