<html>Hi<br /><br /> I am trying to see if I can get stunnel to authenticate using a client certificate towards a F5 setup - but I am having trouble getting it to work.<br /><br />Certificates are issued froma Microsoft PKI - where the F5 checks validity via an OCSP responder.<br /><br />In my stunnel config file, I have:<br /><br /><br />[F5Cert]<br />client=yes<br />accept = 127.0.0.1:1598<br />connect = F5test.xxx.dk:443<br />delay = yes<br />CAFile = GlobalSign-cert-Chain.pem<br />Cert = BaaSClientCertificatePlain.pem<br />key = BaaSClientCertificatePlain.key<br />verify = 2<br /><br />In the CAFile, I have the root CA and issuing certificate from GlobalSign - which have created the SSL certificate being used on the F5 (server side).<br /><br />Cert and Key points to the certificate and private key from my internal Microsoft based PKI.. But should the certificate chain from my internal PKI be listed somewhere as well ?<br /><br /><br />Is this the way to do it - and is stunnel capable of handling client certificate validation ?<br /><br />Regards<br />Brian<br /> </html>