Use Ccproxy + Stunnel as an encryption agent

Https://www.stunnel.org/downloads.html

Ccproxy + stunnel do an encrypted HTTP proxy and SOCKS5 proxy

At present, domestic users can not access some foreign sites, such as http://zh.wikipedia.org, if hosted in a foreign server, it is possible to do their own encryption agent, so that their free access to the Internet.

First, the server in the United States and other foreign IDC, install Ccproxy on the server, start the service, click on the "Account" button in the management interface, set up an HTTP and socks5 only from 127.0.0.1 (HTTP and SOCKS5) proxy account, such as ABC, Password for example for XXXABC. On the Ccproxy Settings menu, set the HTTP proxy port to 8080,SOCKS5 for the proxy port of 8081

Install the Stunnel software on the server (: http://www.stunnel.org/download/binaries.html, find the latest version of the download bar), after installation, configure the stunnel.conf (in the Stunnel installation directory), The configuration is as follows:

Cert = Stunnel.pem
Key = Stunnel.pem
Socket = L:tcp_nodelay=1
Socket = R:tcp_nodelay=1
Taskbar=yes
Client=no

[Http2ssl]
Accept = 10086
Connect = 127.0.0.1:8080

[Socks2ssl]
Accept = 10087
Connect = 127.0.0.1:8081

Executing at the command line
Stunnel.exe-install
net start Stunnel
Server-side configuration is complete.
The Stunnel server will start automatically when you restart your computer.


Second, install the Stunnel software on the client computer, after installation, configure stunnel.conf (in the Stunnel installation directory), the configuration is as follows:

Cert = Stunnel.pem
Socket = L:tcp_nodelay=1
Socket = R:tcp_nodelay=1
Client=yes

[Http2ssl]
Accept = 3128
Connect = Server ip:10086
[Socks2ssl]
Accept = 1080
Connect = Server ip:10087

Executing at the command line
Stunnel.exe-install
net start Stunnel
The client configuration is complete.
The Stunnel server will start automatically when you restart your computer.

Third, use:
1. HTTP proxy mode
On the client computer's browser, set the HTTP proxy to 127.0.0.1:3128.
In the interface to enter the password, enter the account set above ABC, password XXXABC.
Canunrestricted access to the Internet, including websites blocked by domestic greatfirewall, can be unblocked.

2, SOCKS5 Agent way:
In the SOCKS5 agent software set up proxy server 127.0.0.1, port 1080, fill in the Proxy account password (some SOCKS5 agent software is to enter the account password at startup) and will need to use the SOCKS5 program, such as game software to join the use of SOCKS5 list, You can use the SOCKS5 Proxy service.

has been tested for adoption.

Create an encryption certificate

openssl.exe req -new -x509 -days 3650 -nodes -config pem.conf -out stunnel.pem -keyout stunnel.pem

Save this file as "Create_pem.bat" in the Stunnel directory. Run "Create_pem.bat",

Open Port-Stunnel accepts requests from any IP on port 443, the HTTPS default port.

Use Ccproxy + Stunnel as an encryption agent