Re: [stunnel-users] Problem with 2048 bits SSL sertificate with stunnel

On Mon, 2010-08-23 14:48:12 +0300, Georgi Georgiev wrote:

Hello to all,

We get 2048 bits wildcard certificate for our domain *.domain.com .. And we are using thawte as Certificate Authority . So they send as two certificates ..

One for SSL web and one intermediate certificate ..

The stunnel configuration is :

[https1]

cert = /etc/stunnel/domain.crt

CAfile = /etc/stunnel/domain.intermediate.crt

Georgi,

I think here is the misunderstanding: The 'cert' file is expected to contain the whole certificate chain, i.e. all three certificates, CA, intermediate and domain (see the man page).

The 'CAfile' is for additional certificates needed to verify the client's certificates (if presented or verification is required).

HTH,

Ludolf