I see this message in the Stunnel (client) logs during SSL handshake with the server The server requires a client certificate which has been configured in the stunnel configuration. The handshake is working fine but I was wondering what exactly does this line mean. From what I found so far, seems like there is a way for the server to specify which CA's it will accept for the client certificate and it can specify them in the ClientCertificate request that it sends This server doesnt send anything like that, so I am guessing that is the reason for this log line? Can someone please confirm? Btw, I see this line only when using TLSv1.3. When I restrict the client to TLSv1.2, I dont see this line.

thanks

LOG

Peer certificate required

TLS state (connect): before SSL initialization

Initializing application specific data for session authenticated

TLS state (connect): SSLv3/TLS write client hello

TLS state (connect): SSLv3/TLS write client hello

TLS state (connect): SSLv3/TLS read server hello

TLS state (connect): TLSv1.3 read encrypted extensions

Received trusted client CA list not found

TLS state (connect): SSLv3/TLS read server certificate request