Re: [stunnel-users] Why does verify=3 require the entire cert chain to be present in cafile?

On Wed, 2011-11-02 05:41:57 -0400, al_9x@yahoo.com wrote:

The concept of trusted server certs (as opposed to trusted authority certs) is well established. Firefox cert manager, for example, has a servers tab where you can import and trust specific server certs (self signed and not)

And Firefox accepts such certificates even if they can't be validated (and thus are to be considered invalid)? I would regard this as a bug or at least as a design flaw...

BTW, Firefox comes with about 200 certificates installed, and 200 is much larger than five, which seems to be a pain for you.

Ludolf