# Installer stunnel avec Homebrew, apk, chocolatey, dnf, MacPorts, Nix, pacman, zypper, scoop, winget

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de stunnel pour les workflows d'agents IA.

## installation

```sh
sudo av install brew:stunnel
```

Commandes d'installation supplémentaires:

### macOS

- Homebrew (100%):

```sh
brew install stunnel
```

  Preuve: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install stunnel
```

  Preuve: MacPorts ports tree: security/stunnel/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add stunnel
```

  Preuve: Alpine Linux edge package indexes: stunnel from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz

- dnf (92%):

```sh
sudo dnf install stunnel
```

  Preuve: Fedora Rawhide package metadata: stunnel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#stunnel
```

  Preuve: nixpkgs package indexes: pkgs/by-name/st/stunnel/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S stunnel
```

  Preuve: Arch Linux sync databases: stunnel from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

- zypper (92%):

```sh
sudo zypper install stunnel
```

  Preuve: openSUSE Tumbleweed package metadata: stunnel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Chocolatey (92%):

```sh
choco install stunnel
```

  Preuve: Chocolatey community package catalog: stunnel from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','striata-reader'

- Scoop (92%):

```sh
scoop install extras/stunnel
```

  Preuve: Scoop official bucket manifest trees: bucket/stunnel.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1

- winget (92%):

```sh
winget install --id MichalTrojnara.Stunnel -e
```

  Preuve: Windows Package Manager source index: MichalTrojnara.Stunnel from https://cdn.winget.microsoft.com/cache/source.msix

## Faits du paquet

- **Clé du paquet:** brew:stunnel
- **Gestionnaire de paquets:** Homebrew
- **Version:** 5.79
- **Résumé source:** SSL tunneling program
- **Page d'accueil:** <https://www.stunnel.org/>
- **Dernière mise à jour:** 2026-06-29T16:45:11Z
- **Généré:** 2026-08-03T19:37:03+00:00

## exécutables

- stunnel (alias)
- stunnel3 (alias)

## Comportement d'installation

- Bouteille: non disponible

## Version et fraîcheur

- page générée: 2026-08-03
- version du gestionnaire: 5.79
## Historique du projet et usages

stunnel is a long-running TLS wrapper proxy used to add TLS encryption to clients and servers that do not speak TLS themselves.

### Historique du projet

The official changelog records stunnel 0.1 as a testing skeleton on 1998-02-10 and stunnel 1.0 on 1998-02-11 as the first version with SSL support. That makes it one of the older still-packaged command-line TLS utilities in Unix and Windows ecosystems.

The project has remained focused on wrapping arbitrary TCP services with SSL/TLS rather than replacing the underlying application protocol. Its manual and HOWTO present configuration as service sections that accept local connections and connect or execute another service behind the encrypted layer.

### Historique d'adoption

The input package facts list stunnel in Homebrew, Alpine, Fedora/DNF, MacPorts, Nix, Arch, Chocolatey, Scoop, WinGet, and openSUSE/Zypper. That breadth reflects stunnel's role as a portable operational tool rather than a single-platform utility.

The official downloads page publishes source tarballs, Windows installers, Android builds, signatures, checksums, and rsync-accessible code archives, showing a release process designed for downstream packagers and administrators.

### Modes d'utilisation

Administrators use stunnel to put TLS in front of non-TLS-aware services or to create encrypted client-side tunnels to remote services. The manual describes global options plus per-service sections containing options such as accept, connect, certificates, keys, and verification settings.

Common package usage is configuration-file driven: install the package, write stunnel.conf service blocks, provide certificates or keys where needed, and supervise stunnel as a daemon or service.

### Pourquoi les passionnés de paquets s'y intéressent

stunnel matters to package nerds because it is a classic tiny Unix tool with a huge compatibility surface: C code, OpenSSL linkage, service-manager integration, certificate file handling, Windows installers, and distribution patches all meet in one package.

It is also a practical example of packaging security middleware. The package is not exciting because it owns an application protocol; it is important because it lets old or simple services survive in TLS-required environments.

### Chronologie

- 1998: stunnel 0.1 testing skeleton and stunnel 1.0 with SSL support appeared in the official changelog.
- 2014: stunnel 5-era releases continued active OpenSSL security updates, including OpenSSL DLL updates during major vulnerability periods.
- 2026: The official release list shows stunnel 5.79 released on 2026-06-29.

### Related projects

- OpenSSL is the cryptographic library stunnel relies on for TLS functionality.
- TCP Wrappers/libwrap appears in the manual as an optional access-control integration.

### Sources

- <https://www.stunnel.org/>
- <https://www.stunnel.org/NEWS.html>
- <https://www.stunnel.org/downloads.html>
- <https://www.stunnel.org/manual.html>
- <https://www.stunnel.org/versions.html>
- input.source_facts.package-manager


## Notes de sécurité

formula declares a Homebrew service.

- **Risque Geiger:** orange / moyen
- formula declares a Homebrew service


## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: <config-folder>/stunnel.conf
## Autres enregistrements de gestionnaires de paquets

- Nix - stunnel: normalized package name match | nixpkgs package indexes: pkgs/by-name/st/stunnel/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - stunnel - 5.76-r0: normalized package name match | Alpine Linux edge package indexes: stunnel from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSL encryption wrapper between network client and server | https://www.stunnel.org
- apk - stunnel-doc - 5.76-r0: normalized package name match | Alpine Linux edge package indexes: stunnel-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSL encryption wrapper between network client and server (documentation) | https://www.stunnel.org
- apk - stunnel-openrc - 5.76-r0: normalized package name match | Alpine Linux edge package indexes: stunnel-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | SSL encryption wrapper between network client and server (OpenRC init scripts) | https://www.stunnel.org
- apk - stunnel3 - 5.76-r0: normalized package name match | Alpine Linux edge package indexes: stunnel3 from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Perl wrapper to use stunnel 3.x syntax in stunnel >=4.05 | https://www.stunnel.org
- dnf - stunnel - 5.78-5.fc45: normalized package name match | Fedora Rawhide package metadata: stunnel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | A TLS-encrypting socket wrapper | https://www.stunnel.org/
- pacman - stunnel - 5.79-1: normalized package name match | Arch Linux sync databases: stunnel from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A program that allows you to encrypt arbitrary TCP connections inside SSL | https://www.stunnel.org/
- zypper - stunnel - 5.79-1.2: normalized package name match | openSUSE Tumbleweed package metadata: stunnel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Universal TLS Tunnel | https://www.stunnel.org/
- zypper - stunnel-doc - 5.79-1.2: normalized package name match | openSUSE Tumbleweed package metadata: stunnel-doc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Documentation for the universal TLS Tunnel | https://www.stunnel.org/
- MacPorts - stunnel: normalized package name match | MacPorts ports tree: security/stunnel/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
- Chocolatey - stunnel: normalized package name match | Chocolatey community package catalog: stunnel from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','striata-reader'
- Scoop - extras/stunnel: normalized package name match | Scoop official bucket manifest trees: bucket/stunnel.json from https://api.github.com/repos/ScoopInstaller/Extras/git/trees/master?recursive=1
- winget - MichalTrojnara.Stunnel: normalized package name match | Windows Package Manager source index: MichalTrojnara.Stunnel from https://cdn.winget.microsoft.com/cache/source.msix


## Combined YAML source

View the package source record on GitHub. [combined/stunnel.yml](https://github.com/mxcl/pkgdb/blob/main/combined/stunnel.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated configuration and credential file locations
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph