pastebin

CERT="cert=mydevice.crt,key=mydevice.key"

SSLSRV="cipher=AES256-SHA,method=TLS1.2,verify=0"

SSLCLI="cipher=AES128-SHA,method=SSL3,verify=0"

socat

 OPENSSL-LISTEN:11443,bind=127.0.0.1,reuseaddr,fork,$CERT,$SSLSRV  

 OPENSSL:192.168.1.111:443,$SSLCLI