13 Jan
2012
13 Jan
'12
5:17 p.m.
Thomas Eifert wrote:
2012.01.12 14:05:01 LOG4[292:3840]: CERT: Verification error: unable to get local issuer certificate
Unfortunately sending root CA certificate within the chain is optional. This is why root CA certificate didn't make it to your peer-nntps3.pem.
The good news is that in recent versions of stunnel I implemented a solution for it:
verify = 3
Replace it with "verify = 4". This option only checks the peer certificate, and ignores all other certificates in the chain.
Mike