On Wed, 2011-04-27 13:06:43 +0200, laurent.uk@bnpparibas.com wrote:

Dear ludolf thanks you for your response.

So if i use verify = 3, the crl files is useless.

I went to the url http://crl.verisign.com , and there were a lot of files.

what are the files corresponding of the crl list please?

Those with the ".crl" extension, I suppose ;-)

You'll need to look for the CRLs matching the certificates you want to use. Note, there may be CRLs for intermediate certificates too.

At least (the randomly selected) Class3SoftwarePublishers.crl seems to be in DES format, you might have to convert it to PEM for use with stunnel.

Ludolf