[stunnel-users] Difference between verify=2, 3 and 4

[Michal Trojnara]

On 09/20/2013 10:10 AM, Thomas Eifert wrote:
> Testing is the best way, for sure.  In theory, L4 checks for the peer 
> certificate only.  Yet, I'm currently
> using at least one peer certificate that requires the top CA to be 
> present in the .pem file.  If I remove it,
> L4 fails.  Go figure.

I wasn't able to reproduce this issue.  Could you send some more details.
A step-by-step procedure to would be great.

Mike