[stunnel-users] Authenticate both client and server?

[Kārlis Repsons]

Dear stunnel programmers and users,

first thanks for maintaining this piece of software, which I found useful!
I would like to reach some understanding about ssl certs usage so it would be 
possible to make both client and server to authenticate themselves. Could 
somebody briefly tell whats to be done, if I'd like to use the following (at 
least similar) certs setup:

root-ca.crt
*server.crt
*client.crt
(* signed by root-ca)

Note, that root-ca private key is not available for server nor client. 
Any help appreciated...