How to change TIMEOUTconnect parameter in Stunnel?

Question

linux

Hi all.
I have a server running Stunnel.
When called with parameters, it produces;

stunnel -version
stunnel 5.27 on x86_64-unknown-linux-gnu platform
Compiled/running with OpenSSL 1.0.1e 11 Feb 2013
Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI

Global options:
debug                  = daemon.notice
RNDbytes               = 64
RNDfile                = /dev/urandom
RNDoverwrite           = yes

Service-level options:
ciphers                = FIPS (with "fips = yes")
ciphers                = HIGH:+3DES:+DH:!aNULL:!SSLv2 (with "fips = no")
debug                  = notice
logId                  = sequential
options                = NO_SSLv2
options                = NO_SSLv3
sessionCacheSize       = 1000
sessionCacheTimeout    = 300 seconds
stack                  = 65536 bytes
TIMEOUTbusy            = 300 seconds
TIMEOUTclose           = 60 seconds
TIMEOUTconnect         = 10 seconds
TIMEOUTidle            = 43200 seconds
verify                 = none

you need to change the TIMEOUTconnect parameter from 10 seconds to 20, but you can’t find the file where it is registered.
Thanks in advance to everyone.

Answer 1

The issue was resolved by the method of scientific poke. The colleague changed the value in /etc/stunnel/stunnel.conf and /usr/local/etc/stunnel/stunnel.conf, the daemon accepted the parameter. I don’t know if this is a bug, but the value must be changed in both files, if there is no parameter, add it manually.

Answer 2

See here /usr/etc/stunnel/
When starting the daemon, it shows a config file that uses:

# /usr/bin/stunnel 
[ ] Clients allowed=512000
[.] stunnel 5.56 on x86_64-pc-linux-gnu platform
[.] Compiled/running with OpenSSL 1.1.1  11 Sep 2018
[.] Threading:PTHREAD Sockets:POLL,IPv6 TLS:ENGINE,FIPS,OCSP,PSK,SNI
[ ] errno: (*__errno_location ())
[.] Reading configuration from file /usr/etc/stunnel/stunnel.conf
...

Actually, add a line TIMEOUTconnect = 20to the file/usr/etc/stunnel/stunnel.conf