VSI-AXPVMS-STUNNEL-V0556-0B-1-RNOTES.PDF

This document announces the release of Stunnel 5.56 for OpenVMS I64 and Alpha systems, a port designed to add SSL/TLS encryption functionality to existing client and server applications without requiring code changes.

Key Features and Improvements:

• Based on the Stunnel 5.56 distribution and utilizes OpenSSL 1.1.1g.
• It is multi-threaded, allowing full advantage of multiple processor cores for scalability.
• Includes a fix for a select() deadlock issue identified during testing.
• Ensures the stunnel$root logical name is correctly defined after installation.

Installation and Configuration:

• Installation is performed using a PCSI kit via PRODUCT INSTALL STUNNEL.
• Requirements: OpenVMS Version 8.4-1H1 or higher, and a compatible TCP/IP stack (VSI, HPE, or MultiNet). Installation on an ODS-5-enabled file system is recommended.
• Post-Installation: Users must add commands to SYS$MANAGER:SYSTARTUP_VMS.COM and SYS$MANAGER:SYSHUTDWN.COM for automatic service start and stop.
• Configuration: A configuration file, typically STUNNEL$ROOT:[ETC]STUNNEL.CONF, must be created to define stunnel services. Sample configuration files are provided, and reading the online stunnel documentation is recommended.
• Includes a self-signed certificate for basic testing, which has an expiration date.

System Requirements and Resources:

• Running stunnel, especially with many connections, requires specific privileges (e.g., TMPMBX, NETMBX, BYPASS) and adjustments to system quotas.
• The CHANNELCNT system parameter may need to be increased for high numbers of concurrent connections.

Limitations:

• A significant limitation of this release is the lack of IPv6 support, which is planned for future releases.

The document acknowledges the work of stunnel author Michał Trojnara and Duncan Morris for testing and providing a critical fix for the OpenVMS port.