Typical Stunnel Achitectures


Server supports SSL/TLS, client does not.
Run Stunnel on client machine as an SSL client, point local app to local port.

Client supports SSL/TLS, server does not.
Run Stunnel on server machine as an SSL server, have it shuttle unencrypted data to local port.
Run Stunnel on server machine as an SSL server, have it shuttle unencrypted data to local program.

Neither client nor server support SSL/TLS.
Run an Stunnel client and Stunnel server on respective endpoints.