diff -ru stunnel-4.27/tools/stunnel.conf-sample.in stunnel-4.27.patch/tools/stunnel.conf-sample.in --- stunnel-4.27/tools/stunnel.conf-sample.in 2009-04-16 11:10:09.000000000 +0200 +++ stunnel-4.27.patch/tools/stunnel.conf-sample.in 2009-05-06 21:45:12.000000000 +0200 @@ -3,18 +3,18 @@ ; Please make sure you understand them (especially the effect of the chroot jail) ; Certificate/key is needed in server mode and optional in client mode -cert = @prefix@/etc/stunnel/mail.pem -;key = @prefix@/etc/stunnel/mail.pem +cert = /etc/stunnel/mail.pem +;key = /etc/stunnel/mail.pem ; Protocol version (all, SSLv2, SSLv3, TLSv1) sslVersion = SSLv3 ; Some security enhancements for UNIX systems - comment them out on Win32 -chroot = @prefix@/var/lib/stunnel/ -setuid = nobody -setgid = @DEFAULT_GROUP@ +chroot = /var/lib/stunnel/ +setuid = stunnel +setgid = stunnel ; PID is created inside the chroot jail -pid = /stunnel.pid +pid = /var/run/stunnel/stunnel.pid ; Some performance tunings socket = l:TCP_NODELAY=1 @@ -30,12 +30,12 @@ ; CApath is located inside chroot jail ;CApath = /certs ; It's often easier to use CAfile -;CAfile = @prefix@/etc/stunnel/certs.pem +;CAfile = /etc/stunnel/certs.pem ; Don't forget to c_rehash CRLpath ; CRLpath is located inside chroot jail ;CRLpath = /crls ; Alternatively you can use CRLfile -;CRLfile = @prefix@/etc/stunnel/crls.pem +;CRLfile = /etc/stunnel/crls.pem ; Some debugging stuff useful for troubleshooting ;debug = 7