Since FIX Antenna C++/.NET version 2.13.0 and FIXEdge version, 5.9.0 SSL built-in support has been introduced. Refer to How to configure built-in SSL support for FIX session in FIXEdge for details. However, you can continue use stunnel with accordance to the current article if you wish.
Download latest version of the installer from https://www.stunnel.org/downloads.html
Run the installer and answer questions to generate a certificate.
Configuration example #1. FIXEdge's initiator connects to SSL acceptor over Stunnel
Initiator FIX session
- Run stunnel GUI Start from Start menu Run
Edit stunnel.conf from stunnel system tray icon context menu. Add a new SSL service
<counterparty_ip> - ip address of counterparty
- Reload stunnel.conf from stunnel system tray icon context menu
Configure fix session in FIXEdge
Open FIXEdge.properties to specify Initiator FIX session parameters:
Initiator FIX session
- Connect to VPN (if necessary; if not, just skip this step);
Configuration example #2. FIXEdge is a proxy between 2 counterparties.
The current configuration describes the following scenario.
FIXEdge establishes SSL connection to Exchange. The client connects to FIXEdge over SSL. All messages from Exchange are routed to the Client and vice versa.
Stunnel is configured for Incoming and outgoing connections on FIXEdge's side and on the Client side.
The next configuration parameters are used in the configuration examples:
<exchange_ip> - Exchange's IP
<FIXEdge_ip> - FIXEdge IP
TCP port for SSL Connections on FIXEdge site: 443
TCP port for SSL Connections on Exchange site: 443
FIXEdge ListenPort from engine.properties: 8901
Configuration on FIXEdge side
FIXEdge has two configured sessions: EXCHANGE and CLIENT
Simple routing configuration
Configuration on the Client side
FIXEdge uses Windows certificate store for connection to an Exchange.
Import the certificate to windows certificate with a certutil tool
Configure Windows Certificate store in Stunnel
and configure tunnel for the session requiring SSL Connection
<exchange ip> - Enchange connection IP
<exchange port> - Enchange connection port
Configure Initiator session in FIXEdge.properties