<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>
<DIV>Hello List</DIV>
<DIV>I have stunnel 4.7</DIV>
<DIV>In the messages of the list I have not seen solution to my problem.</DIV>
<DIV>This is VERIFY ERROR ONLY MY: no cert </DIV>
<DIV> </DIV>
<DIV>stunnel.log in Server</DIV>
<DIV>##################</DIV>
<DIV>2005.02.25 07:55:07 LOG5[2501:1076546480]: VERIFY OK: depth=1,
/C=CU/ST=Ciudad Habana/L=Centro Habana/O=Segurmatica/OU=Agencia de <A
href="mailto:Certificacion/CN=Segurmatica/emailAddress=ca@segurmatica.cu">Certificacion/CN=Segurmatica/emailAddress=ca@segurmatica.cu</A><BR>2005.02.25
07:55:07 LOG4[2501:1076546480]: VERIFY ERROR ONLY MY: no cert for
/C=CU/ST=Ciudad Habana/L=Centro Habana/O=Ministerio Informatica y
Comunicaciones/OU=Segurmatica/CN=Humberto <A
href="mailto:Morell/emailAddress=morell@seg.inf.cu">Morell/emailAddress=morell@seg.inf.cu</A><BR>2005.02.25
07:55:07 LOG7[2501:1076546480]: SSL alert (write): fatal: certificate
unknown<BR>#############</DIV>
<DIV> </DIV>
<DIV>stunnel.conf in Server</DIV>
<DIV>##############</DIV>
<DIV>#chroot = /var/lib/stunnel/<BR>verify = 3<BR>CApath =
/etc/stunnel/certdb<BR># or simply use CAfile instead:<BR>#CAfile =
/etc/stunnel/certs.pem<BR>CAfile = /etc/stunnel/acsegurmatica.crt<BR>#cert =
/etc/stunnel/stunnel.pem<BR>cert =
/etc/stunnel/certstunnel.pem<BR>#################</DIV>
<DIV> </DIV>
<DIV>File in /etc/stunnel</DIV>
<DIV>###############</DIV>
<DIV><FONT
color=#0000ff>certdb</FONT>
morell.pem stunnel.prueba.pem certstunnel.pem
stunnel.conf<BR>acsegurmatica.crt
morell.crt stunnel.log<BR><FONT
color=#0000ff>certclient </FONT>
morell.key stunnel.pem</DIV>
<DIV>###############</DIV>
<DIV> </DIV>
<DIV>Link in /etc/stunnel/certdb</DIV>
<DIV>###############</DIV>
<DIV>drwxr-xr-x 2 root root 176 Feb 25 11:06 .<BR>drwx------ 4 root
root 472 Feb 25 10:52 ..<BR>lrwxrwxrwx 1 root root 24 Feb 25 11:00
2307a3fe.0 -> /etc/stunnel/stunnel.pem<BR>lrwxrwxrwx 1 root root
30 Feb 25 11:01 3f5b7ca8.0 ->
/etc/stunnel/acsegurmatica.crt<BR>lrwxrwxrwx 1 root root 23 Feb 25
11:03 3fb3183e.0 -> /etc/stunnel/morell.pem<BR>lrwxrwxrwx 1 root
root 28 Feb 25 11:06 d14abd18.0 ->
/etc/stunnel/certstunnel.pem<BR>#################</DIV>
<DIV> </DIV>
<DIV>client in Windows stunnel.conf</DIV>
<DIV>##############</DIV>
<DIV>client = yes <BR>cert = d:\morell.pem<BR>debug = 7<BR>output =
d:\stunnel.log</DIV>
<DIV>[lsd] <BR>accept = 9595 <BR>connect = 10.10.1.83:9500<BR>[ssh]<BR>accept =
2222<BR>connect = 10.10.1.83:9522</DIV>
<DIV>#####################<BR>Note:</DIV>
<DIV>I don't use chroot</DIV>
<DIV>I have try, but idem error with.</DIV>
<DIV>File morell.pem only client certificate and other time file morell.pem
</DIV>
<DIV>Key private</DIV>
<DIV>crl</DIV>
<DIV>Certificate </DIV>
<DIV> </DIV>
<DIV>With verify = 2 all is ok</DIV>
<DIV> </DIV>
<DIV>Please help</DIV>
<DIV>Best regards</DIV>
<DIV>Morell</DIV></DIV>
<DIV> </DIV></BODY></HTML>