# horizons_stunnel_client.conf
#   
#  External CLIENT configuration file for Horizons command-line interface
#   https://ssd.jpl.nasa.gov/ftp/ssd/horizons_stunnel_client.conf
#
#  Install 'stunnel' on local system. See documentation:
#   https://ssd.jpl.nasa.gov/horizons/horizons_tls_access.html
#
#  When 'stunnel' is running, connect to Horizons with terminal commands ...
#    
#     telnet localhost 6775
#
#  or ...
#
#     telnet 127.0.0.1 6775 
#
#  Modification History:
#
#  DATE         Who  Change
#  -----------  ---  ----------------------------------------------------------
#  2024-Sep-01  JDG  Version 1
#  2025-Sep-29  JDG  Updated link to documentation
#
#  Key:
#  JDG= Jon.D.Giorgini@jpl.nasa.gov
#------------------------------------------------------------------------------
#
# Horizons external client service definition
;
[Horizons_TLS_command_line CLIENT]
  client       = yes
  accept       = 127.0.0.1:6775
  connect      = ssd.jpl.nasa.gov:6770
;
; Optional: disable Nagle algorithm for improved interactive network latency. 
  socket       = l:TCP_NODELAY=1
  socket       = r:TCP_NODELAY=1
;
; Optional: authenticate server with existing public key infrastructure (PKI)
;
;  To use, change "CAfile" to point to the existing local PEM-format file 
;  holding public certificates of trusted Certificate Authorities (CAs). 
;  If unknown, check with the local system administrator for the location of 
;  that file, which is typically updated yearly if not more often. This is 
;  NOT the 'stunnel.pem' file. 
;
;  Then uncomment the next four settings and save the edited file. Halt 
;  'stunnel' if it is already running and restart with the new configuration. 
;
; CAfile       = /etc/pki/tls/certs/ca-bundle.crt
; verifyChain  = yes
; checkHost    = ssd.jpl.nasa.gov
; checkHost    = horizons.jpl.nasa.gov
;
; Don't suggest cipher protocols not supported by the Horizons server 
  sslVersion   = all
  options      = NO_SSLv2
  options      = NO_SSLv3
;
; Do not wait for close_notify from TLS/SSL
  TIMEOUTclose = 0
;
