<html><head></head><body><div class="ydp67094de2yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div>
<div dir="ltr" data-setdir="false">.crt is most likely the private key. .pem is most likely the certificate.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">ref:</div><div dir="ltr" data-setdir="false"><a href="https://tools.ietf.org/html/rfc7468" rel="nofollow" target="_blank">https://tools.ietf.org/html/rfc7468</a><br></div><div><br></div>
</div><div id="ydpb912aa1fyahoo_quoted_8870050680" class="ydpb912aa1fyahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Monday, September 9, 2019, 01:40:11 p.m. EDT, Brent Kimberley <brent_kimberley@rogers.com> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div id="ydpb912aa1fyiv0144117832"><div><div class="ydpb912aa1fyiv0144117832ydp777e8123yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div>
<div dir="ltr">Salut Pierre.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">I'm not sure what's wrong.</div><div dir="ltr"><br clear="none"></div><div dir="ltr">Try using a tool like winmerge, windiff or notepad to compare .\config\stunnel.conf and .\config\openssl.cnf</div><div dir="ltr"><br clear="none"></div><div dir="ltr"><br clear="none"></div><div dir="ltr"><div><div dir="ltr" style="color:rgb(0, 0, 0);font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">Then verify that openssl is functional</div><div dir="ltr" style="color:rgb(0, 0, 0);font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;">> cd "C:\Program Files (x86)\stunnel"<br clear="none"></div><div dir="ltr" style="color:rgb(0, 0, 0);font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div>> .\bin\openssl version</div><div>OpenSSL 1.1.1c 28 May 2019</div><div><br clear="none"></div></div></div></div><div dir="ltr"><br clear="none"></div><div><br clear="none"></div>
</div><div class="ydpb912aa1fyiv0144117832yqt4516301879" id="ydpb912aa1fyiv0144117832yqt20128"><div class="ydpb912aa1fyiv0144117832ydp19fa06f9yahoo_quoted" id="ydpb912aa1fyiv0144117832ydp19fa06f9yahoo_quoted_8652046745">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Monday, September 9, 2019, 09:38:02 a.m. EDT, Pierre DUPONT <pierre.dupont@nedap.fr> wrote:
</div>
<div><br clear="none"></div>
<div><br clear="none"></div>
<div><div dir="ltr">Hello Brent,<br clear="none"><br clear="none">Thanks for your answer. Unfortunately, I could not make these dumps...<br clear="none"><br clear="none">Here comes below what I typed, what I got as return and my sTunnel tree (sTunnel and our webservice are both hosted on the same machine running W7 64<br clear="none"><br clear="none">C:\Program Files (x86)\stunnel>bin\openssl x509 -in config\stunnel.crt -noout -text<br clear="none">unable to load certificate<br clear="none">3904:error:0909006C:PEM routines:get_name:no start line:crypto/pem/pem_lib.c:745<br clear="none">:Expecting: TRUSTED CERTIFICATE<br clear="none"><br clear="none">C:\Program Files (x86)\stunnel>tree /F<br clear="none">Structure du dossier<br clear="none">Le numéro de série du volume est 961B-57B7<br clear="none">C:.<br clear="none">│ uninstall.exe<br clear="none">│<br clear="none">├───bin<br clear="none">│ libcrypto-1_1-x64.dll<br clear="none">│ libssl-1_1-x64.dll<br clear="none">│ openssl.exe<br clear="none">│ stunnel.exe<br clear="none">│ tstunnel.exe<br clear="none">│<br clear="none">├───config<br clear="none">│ ca-certs.pem<br clear="none">│ openssl.cnf<br clear="none">│ stunnel.cert<br clear="none">│ stunnel.conf<br clear="none">│ stunnel.crt<br clear="none">│ stunnel.pem<br clear="none">│ stunnelChrome.cer<br clear="none">│<br clear="none">├───doc<br clear="none">│ stunnel.html<br clear="none">│<br clear="none">└───engines<br clear="none"> capi.dll<br clear="none"> padlock.dll<br clear="none"> pkcs11.dll<br clear="none"><br clear="none">With kind regards from<br clear="none">Pierre Dupont<br clear="none">Support & Développement for libraries<br clear="none"><br clear="none">Mail : <a shape="rect" href="mailto:sav.bibli@nedap.fr" rel="nofollow" target="_blank">sav.bibli@nedap.fr</a><br clear="none">Phone : 33 6 13 99 69 38 – 33 1.61.03.03 18<br clear="none">8/10 Chemin d’Andrésy<br clear="none">95610 Eragny sur Oise<br clear="none"><br clear="none"><br clear="none"><br clear="none"><div class="ydpb912aa1fyiv0144117832ydp19fa06f9yqt9882683272" id="ydpb912aa1fyiv0144117832ydp19fa06f9yqtfd43787"><br clear="none">-----Message d'origine-----<br clear="none">De : Brent Kimberley [mailto:<a shape="rect" href="mailto:brent_kimberley@rogers.com" rel="nofollow" target="_blank">brent_kimberley@rogers.com</a>] <br clear="none">Envoyé : vendredi 6 septembre 2019 18:02<br clear="none">À : Pierre DUPONT <<a shape="rect" href="mailto:pierre.dupont@nedap.fr" rel="nofollow" target="_blank">pierre.dupont@nedap.fr</a>>; <a shape="rect" href="mailto:stunnel-users@stunnel.org" rel="nofollow" target="_blank">stunnel-users@stunnel.org</a><br clear="none">Cc : Brent Kimberley <<a shape="rect" href="mailto:brent_kimberley@rogers.com" rel="nofollow" target="_blank">brent_kimberley@rogers.com</a>><br clear="none">Objet : TR: using sTunnel with Chrome (Pierre DUPONT)<br clear="none"><br clear="none">Dump your stunnel.crt file. <br clear="none"><stunnel_home>/bin/openssl x509 -in stunnel.crt -noout -text<br clear="none"><br clear="none">And, compare with <br clear="none">* section 4 of <a shape="rect" href="https://tools.ietf.org/html/rfc5280" rel="nofollow" target="_blank">https://tools.ietf.org/html/rfc5280</a><br clear="none">* Peer-reviewed public sites. <a shape="rect" href="https://www.ssllabs.com/ssltest/" rel="nofollow" target="_blank">https://www.ssllabs.com/ssltest/</a><br clear="none"><br clear="none"><br clear="none">Dump your stunnel.cnf file. And, compare with <br clear="none">stunnel_home>/config/openssl.cnf file<br clear="none"><a shape="rect" href="https://access.redhat.com/solutions/28965" rel="nofollow" target="_blank">https://access.redhat.com/solutions/28965</a><br clear="none"><a shape="rect" href="https://www.openssl.org/docs/manmaster/man5/x509v3_config.html" rel="nofollow" target="_blank">https://www.openssl.org/docs/manmaster/man5/x509v3_config.html</a><br clear="none"><br clear="none"><br clear="none">----------------------------------------------------------------------<br clear="none"><br clear="none">From: Pierre DUPONT <<a shape="rect" href="mailto:pierre.dupont@nedap.fr" rel="nofollow" target="_blank">pierre.dupont@nedap.fr</a>><br clear="none"><br clear="none">De : Pierre DUPONT<br clear="none">Envoy? : jeudi 5 septembre 2019 16:55<br clear="none">Cc : _sav.bibli <<a shape="rect" href="mailto:sav.bibli@nedap.fr" rel="nofollow" target="_blank">sav.bibli@nedap.fr</a>>; Philippe ANQUETIN <<a shape="rect" href="mailto:philippe.anquetin@nedap.fr" rel="nofollow" target="_blank">philippe.anquetin@nedap.fr</a>><br clear="none">Objet : using sTunnel with Chrome<br clear="none"><br clear="none">Good day to all. So far, I can't succeed to use Chrome with sTunnel.<br clear="none"><br clear="none">Here is my configuration for sTunnel....<br clear="none"><br clear="none">However, I cannot connect on https<br clear="none"><br clear="none">I tried several things found browsing the list, like building a certificate with<br clear="none">openssl req -new -x509 -days 365 -nodes -config stunnel.cnf -out stunnel.crt -keyout stunnel.crt<br clear="none"><br clear="none">No result so the only solution I see now is to call you for some help...<br clear="none"><br clear="none">With kind regards,<br clear="none"><br clear="none"><br clear="none">Cordiales salutations de<br clear="none">Pierre Dupont<br clear="none">Support S.A.V. & D?veloppement Biblioth?ques<br clear="none"><br clear="none">Courriel S.A.V. : <a shape="rect" href="mailto:sav.bibli@nedap.fr" rel="nofollow" target="_blank">sav.bibli@nedap.fr</a><mailto:<a shape="rect" href="mailto:sav.bibli@nedap.fr" rel="nofollow" target="_blank">sav.bibli@nedap.fr</a>><br clear="none">06 13 99 69 38 - 01.61.03.03 18<br clear="none">8/10 Chemin d'Andr?sy<br clear="none">95610 Eragny sur Oise<br clear="none">NEDAP LOGO<br clear="none"><br clear="none"></div></div></div>
</div>
</div></div></div></div></div>
</div>
</div></body></html>