[stunnel-users] Stunnel supports ECC certificate?

Bao, Robert rbao at tycoint.com
Thu Jun 3 20:13:48 CEST 2010


I searched the entire archive, couldn't find the answer/solution I am
looking for. I have to post to this group, and appreciate any
help/suggestion from any you.

I use the latest 1.0.0 OpenSSL and 4.33 Stunnel.

I used OpenSSL commands that very similar to what is described in the
following link to create the ECC certificate and the private key file.
http://src.opensolaris.org/source/xref/sfw/usr/src/lib/openssl/openssl-0
.9.8n/demos/ssltest-ecc/ECC-RSAcertgen.sh

Start Stunnel, see the following errors:
Key file: (actual path to the private key file)\HOST.KEY
error stack: 140B3009 : error:140B3009:SSL
routines:SSL_CTX_use_RSAPrivateKey_file:PEM lib
SSL_CTX_use_RSAPrivateKey_file: 607907F: error:0607907F:digital envelope
routines:EVP_PKEY_get1_RSA:expecting an rsa key

There was a similar posting 4-5 years ago, and Mike answered it (the
answer was: Stunnel didn't support ECC at that time).
http://stunnel.mirt.net/pipermail/stunnel-users/2005-October/000817.html

Seems like this is still true today. Then, when the ECC support will be
added to Stunnel?

If Stunnel already supports ECC certificate, how do I make it work?

Thanks.

Robert Bao
Software House
Tyco International
978-577-4202

Explore our new Tyco Online Learning Center Web-based Training Bundles
at: www.swhouse.com/support/tyco_online_learning_center.aspx

This e-mail may contain or have attached to it information or technology
the export or re-export of which is restricted by U.S. laws and
regulations. By viewing this e-mail and any attachments, the recipient
agrees to the following: (i) the recipient's use of the contents of this
e-mail and any attachments shall comply with all applicable laws, rules
and regulations, including, without limitation, U.S. international trade
laws and regulations, and (ii) the recipient may not transfer or
otherwise export or re-export any information or technology contained in
this e-mail or any attachment except in full compliance with the export
controls administered by the U.S. and other countries and any applicable
import and use restrictions. 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.stunnel.org/pipermail/stunnel-users/attachments/20100603/260ddd5f/attachment.html>


More information about the stunnel-users mailing list