[stunnel-users] Re: Equivalence of verify=2

I would like to authenticate a server with only its CA file. What is the equivalence of verify=2 ?

requireCert = yes

verifyChain = no

verifyPeer = yes

Regards

Yann

Hi! Take a look at this cheat sheet:

no veryfy <=> requestCert=no & requireCert=no & verifyChain=no & verifyPeer=no verify=0 <=> requestCert=yes & requireCert=no & verifyChain=no & verifyPeer=no verify=1 <=> requestCert=yes & requireCert=no & verifyChain= yes & verifyPeer=no verify=2 <=> requestCert=yes & requireCert=yes & verifyChain= yes & verifyPeer=no verify=3 <=> requestCert=yes & requireCert=yes & verifyChain= yes & verifyPeer=yes verify=4 <=> requestCert=yes & requireCert=yes & verifyChain= no & verifyPeer=yes

Regards, Małgorzata