Encrypted Tracker data

unknown 2 years ago

Dear All ,

I would like to know if its possible to use TLS on the incoming port for the trackers.

thanks

Anton Tananaev 2 years ago

We don't support TLS, so you would need a proxy for it.

unknown 2 years ago

The same story as with TLS for the main Web page with virtual hosts and what not. Right?

Thanks

Anton Tananaev 2 years ago

Kind of. Depends on what protocol you're using.

unknown 2 years ago

Teltonika protocol
Please let me know if there is a common way to do it.
Thanks

Anton Tananaev 2 years ago

I don't know if there's a common way. You need to find a proxy for it. That's all I know.

unknown 2 years ago

perfect As soon as I know I will let you know how I did it.

unknown 2 years ago

So I found the solution using : nginx

You have to build nginx from source including the following arguments

--with-debug --with-stream --with-stream_ssl_module

Then after you build it and it works.
You need to create your own CA authority and an SSL cert for your server front looking encryption. (EASY-RSA)
Then you setup on the nginx.conf the following :

stream {
upstream stream_backend {
server "what ever IP : port non encrypted internal )
}
server {
listen "any-port you like for the outside world SSL traffic" ssl;
proxy_pass stream_backend;
ssl_certificate /etc/ssl/certs/"SSL".crt;
ssl_certificate_key /etc/ssl/certs/"SSL".key;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 4h;
ssl_handshake_timeout 10s;
#...
}
}

That's it.