[stunnel-users] Verify = 3 and Giganews
Thomas Eifert
kxkvi at wi.rr.com
Thu Jan 12 21:36:54 CET 2012
Hello,
I've tried to use verify = 3 with Giganews on several occasions now, but
it always fails. It works fine with other servers, however. Here is
the debug
output for the Giganews scenario:
2012.01.12 14:05:01 LOG4[292:3840]: CERT: Verification error: unable to
get local issuer certificate
2012.01.12 14:05:01 LOG4[292:3840]: Certificate check failed: depth=1,
/C=US/O=GeoTrust Inc./OU=Domain Validated SSL/CN=GeoTrust DV SSL CA
2012.01.12 14:05:01 LOG3[292:3840]: SSL_connect: 14090086:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate
verify failed
And the following is from my stunnel.conf:
~~~~~~~~~~~~~~~~~~~~~~~~~~~
debug = 6
delay = yes
[nntps.3]
client = yes
sslVersion = TLSv1
ciphers = AES256-SHA
cafile = peer-nntps.3.pem
verify = 3
accept = 127.0.0.1:119
connect = news.giganews.com:443
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
As I have with other connections, I am saving peer-nntps3.pem
from the log window menu.
Can anyone tell me why this is failing on this server only?
Regards;
Thomas
More information about the stunnel-users
mailing list