On 2013-06-19 14:17, Roman Tuchyna wrote:
I'm trying to create SSl tunnel between my server (Win 2008 R2, 4.56 version of stunnel) and remote application server - I have merged both root and sub certificate into 1 file and it looks like it can verify them and accept them as well, but then it tries to verify it at depth=0 and says certificate not found in local repository. Am I missing anything here ?
I didn't test it myself, but some users reported that OpenSSL requires specific order or certificates and an empty line between them.
BTW: Are you sure that CAfile contains the certificate of *your peer* (the remote application server)?
Mike