[stunnel-users] Verify = 3 and Giganews

[Michal Trojnara]

Thomas Eifert wrote:
> 2012.01.12 14:05:01 LOG4[292:3840]: CERT: Verification error: unable
> to get local issuer certificate

Unfortunately sending root CA certificate within the chain is optional.
This is why root CA certificate didn't make it to your peer-nntps3.pem.

The good news is that in recent versions of stunnel I implemented a 
solution for it:

> verify = 3

Replace it with "verify = 4".  This option only checks the peer 
certificate, and ignores all other certificates in the chain.

Mike