> On Mon, May 19, 2008 at 03:04:04PM -0700, Mark Fenwick wrote:
> > Is creating /usr/local/etc/stunnel on pkgadd a reasonable thing to do?
> 
> IMO, no.
> 

This is why I asked !

> But also, I don't see any reference to that here:
> 
> http://www.stunnel.org/faq/stunnel.html

Right, frankly this documentation is pretty sparse, I'll probably write
a man page and create an annotated stunnel.sample

> 
> > If I was going to put the configuration file somewhere else, where
> > would that somewhere else be ?
> 
> If SMF_FMRI is set then maybe stunnel could get its config file from
> config/stunnel_config_file for the given service.  That'd be very cool.

You can run stunnel in two ways, as a normal user in which case you would 
specify the config file as something you could modify, or you could run it as a 
system service, in which case a SMF manifest would be s usefull addition. I 
plan on creating a SMF manifest and you can enable this service if needed, but 
the default value of config/stunnel_config_file needs to be set to something, 
even if
its changed before the service is enabled.

> 
> Alternatively, what's wrong with /etc?

IMO, nothing, but SMF best practices generally steers you away from creating 
new config in /etc *unless* there is a well known existing interface, which in 
this case is in /usr/local/etc.

This is the conundrum!

Mark


Reply via email to