[stunnel-users] re: Problem with certificates using smtp/pop

[Hans Werner Strube]

"Klaas" wrote:
> I have a part I sent to CA created whit openssl req -new -days 
> 365 -nodes -config stunnel.cnf -out certreq.pem -keyout stunnel.pem
> 
> I have get return a file certnew.cer and I have the file stunnel.pem. And 
> now I don't know what I have to do next to get this certificate. I have 
> tried several options but no one works.

cert = /path/to/certnew.cer
key = /path/to/stunnel.pem

Or concatenate them into one file and use cert = ... only (no key = ...).

Also take care that the CN is the server FQDN to which the client connects.