Stunnel Tunnels Creates pure SSL/TLS connection. Supports SSLv2, SSLv3, TLS, in client or server mode STARTTLS-style negotiation X509 Certificate verification Locally installed certs CA-signed certs Transparent mode (in limited cases...) Chrooting / suid / sgid Local program execve() TCP connections *only*