[stunnel-users] verify =3 error with certificate client

Fri Feb 25 18:53:12 CET 2005

Hello List
I have stunnel 4.7
In the messages of the list I have not seen solution to my problem.
This is VERIFY ERROR ONLY MY: no cert 

stunnel.log in Server
##################
2005.02.25 07:55:07 LOG5[2501:1076546480]: VERIFY OK: depth=1, /C=CU/ST=Ciudad Habana/L=Centro Habana/O=Segurmatica/OU=Agencia de Certificacion/CN=Segurmatica/emailAddress=ca at segurmatica.cu
2005.02.25 07:55:07 LOG4[2501:1076546480]: VERIFY ERROR ONLY MY: no cert for /C=CU/ST=Ciudad Habana/L=Centro Habana/O=Ministerio Informatica y Comunicaciones/OU=Segurmatica/CN=Humberto Morell/emailAddress=morell at seg.inf.cu
2005.02.25 07:55:07 LOG7[2501:1076546480]: SSL alert (write): fatal: certificate unknown
#############

stunnel.conf   in Server
##############
#chroot = /var/lib/stunnel/
verify = 3
CApath = /etc/stunnel/certdb
# or simply use CAfile instead:
#CAfile = /etc/stunnel/certs.pem
CAfile = /etc/stunnel/acsegurmatica.crt
#cert = /etc/stunnel/stunnel.pem
cert = /etc/stunnel/certstunnel.pem
#################

File in /etc/stunnel
###############
certdb           morell.pem    stunnel.prueba.pem certstunnel.pem  stunnel.conf
acsegurmatica.crt  morell.crt       stunnel.log
certclient         morell.key       stunnel.pem
###############

Link in /etc/stunnel/certdb
###############
drwxr-xr-x  2 root root 176 Feb 25 11:06 .
drwx------  4 root root 472 Feb 25 10:52 ..
lrwxrwxrwx  1 root root  24 Feb 25 11:00 2307a3fe.0 -> /etc/stunnel/stunnel.pem
lrwxrwxrwx  1 root root  30 Feb 25 11:01 3f5b7ca8.0 -> /etc/stunnel/acsegurmatica.crt
lrwxrwxrwx  1 root root  23 Feb 25 11:03 3fb3183e.0 -> /etc/stunnel/morell.pem
lrwxrwxrwx  1 root root  28 Feb 25 11:06 d14abd18.0 -> /etc/stunnel/certstunnel.pem
#################

client in Windows stunnel.conf
##############
client = yes 
cert = d:\morell.pem
debug = 7
output = d:\stunnel.log
[lsd] 
accept = 9595 
connect = 10.10.1.83:9500
[ssh]
accept = 2222
connect = 10.10.1.83:9522
#####################
Note:
I don't use chroot
I have try, but idem error with.
File morell.pem only client certificate and other time file morell.pem 
Key private
crl
Certificate 

With verify = 2 all is ok

Please help
Best regards
Morell

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20050225/6bceb1e8/attachment.html>