$OpenBSD: patch-tools_stunnel_conf-sample_in,v 1.1 2004/02/16 12:33:18 jakob Exp $
--- tools/stunnel.conf-sample.in.orig	2004-01-26 20:26:18.000000000 +0100
+++ tools/stunnel.conf-sample.in	2004-02-16 13:10:46.000000000 +0100
@@ -1,13 +1,14 @@
 # Sample stunnel configuration file
 # Copyright by Michal Trojnara 2002
+# Modified for OpenBSD by Michael Schubert 2003
 
 # Comment it out on Win32
-cert = @prefix@/etc/stunnel/mail.pem
-chroot = @prefix@/var/run/stunnel/
+cert = @sysconfdir@/ssl/private/stunnel.pem
+chroot = @localstatedir@/stunnel/
 # PID is created inside chroot jail
-pid = /stunnel.pid
-setuid = nobody
-setgid = nogroup
+pid = /var/run/stunnel.pid
+setuid = _stunnel
+setgid = _stunnel
 
 # Workaround for Eudora bug
 #options = DONT_INSERT_EMPTY_FRAGMENTS
@@ -16,13 +17,13 @@ setgid = nogroup
 #verify = 2
 # don't forget about c_rehash CApath
 # it is located inside chroot jail:
-#CApath = /certs
+#CApath = @sysconfdir@/ssl/certs
 # or simply use CAfile instead:
-#CAfile = @prefix@/etc/stunnel/certs.pem
+#CAfile = @sysconfdir@/ssl/certs.pem
 # CRL path or file (inside chroot jail):
-#CRLpath = /crls
+#CRLpath = @sysconfdir@/ssl/crls
 # or simply use CAfile instead:
-#CRLfile = @prefix@/etc/stunnel/crls.pem
+#CRLfile = @sysconfdir@/ssl/crls.pem
 
 # Some debugging stuff
 #debug = 7
