Skip to content

Commit

Permalink
stunnel: SSL connection timeout workaround (#52)
Browse files Browse the repository at this point in the history
Workaround persistent connections being held by (massively) reducing
idle timeout in example `stunnel` configuration
  • Loading branch information
declension committed Feb 11, 2019
1 parent be1f824 commit 78c4bb9
Showing 1 changed file with 4 additions and 10 deletions.
14 changes: 4 additions & 10 deletions docs/example-config/stunnel.conf
Original file line number Diff line number Diff line change
@@ -1,30 +1,24 @@
; Sample config for squeeze-alexa. Make sure it's suitable for your usage.
; In particular make sure you change MY-PORT and MY-HOSTNAME
;

; Some options used here may not be adequate for your particular configuration
; Please make sure you understand them (especially the effect of chroot jail)

; Certificate/key is needed in server mode and optional in client mode
;cert = /opt/etc/stunnel/stunnel.pem
;key = /opt/etc/stunnel/stunnel.pem

; Some security enhancements for UNIX systems - comment them out on Win32
chroot = /Apps/opt/var/stunnel/
;setuid = nobody
;setgid = nobody
; PID is created inside chroot jail
pid = /stunnel.pid

; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
;compression = rle

; Security
options = NO_SSLv3
options = NO_SSLv2
options = DONT_INSERT_EMPTY_FRAGMENTS

; Reduce connection problems on LMS (see Issue #52)
TIMEOUTidle=7200

; Some debugging stuff useful for troubleshooting
debug = 7
output = stunnel.log
Expand Down

0 comments on commit 78c4bb9

Please sign in to comment.