$ aptitude install stunnel

$ cd /etc/stunnel

$ openssl genrsa -out private.pem 2048
$ openssl req -new -x509 -key private.pem -out cacert.pem -days 365
$ cat private.pem cacert.pem >> /etc/stunnel/stunnel.pem

$ touch /etc/stunnel/stunnel.conf

setuid = stunnel4
setgid = stunnel4
pid = /var/lib/stunnel4/stunnel4.pid

socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1

debug = 5

[proxy]
accept = 7080

connect = 127.0.0.1:3128

cert = /etc/stunnel/stunnel.pem

$ nano /etc/default/stunnel4

$ service stunnel4 restart

  $ touch /etc/stunnel/stunnel.conf

setuid = stunnel4
setgid = stunnel4
pid = /var/lib/stunnel4/stunnel4.pid
debug = 7
output = /var/log/stunnel4/stunnel.log
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
client = yes
[stunnel]
accept = 7080
connect = SERVER_IP:7080

$ service stunnel4 restart

socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
[stunnel]
accept = 7080
connect = SERVER_IP:7080
client = yes